12758 matches found
CVE-2022-24124
はじめに Casdoorは、OAuth 2.0/OIDCに基づいた集中型シングルサインオン（SSO）認証プラットフォームです。 識別番号 CVE番号：CVE-2022-24124 CNPD番号：CNPD-202201-7304 影響を受けるバージョン 危険レベル：高 7.5 HIGH POC/EXP：公開済み Casdoor Casdoor 1.13.1 //1.13.1より前のバージョンが影響を受けます 脆弱性の概要...
CVE-2026-94573
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-94573 Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-94573
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.2.7 . The root cause is insufficient input sanitization and output escaping within the Repeater Field Value. This flaw allows unauthenticated attac...
EUVD-2026-86578
The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Repeater Field Value in all versions up to, and including, 2.2.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-52824
CVE-2026-52824: Kimai デフォルト APPSECRET によるログインリンク偽造...
CVE-2022-22980
CVE-2022-22980 Spring Data MongoDB SpEL式インジェクション MongoDB は、大量のデータストレージに使用される、スケーラブルかつ柔軟性のあるドキュメント指向のNoSQLデータベースです。従来のリレーショナルデータベースのようにテーブルや行を使用する代わりに、MongoDBはコレクションとドキュメントを利用します。ドキュメントはキーと値のペアで構成され、MongoDBにおけるデータの基本単位です。 Spring Data for MongoDB は、包括的なSpring...
CVE-2020-23342
CVE-2020-23342 注意： このリポジトリをローカル仮想マシンでdockerを使って実行する際は、config.pyの24行目のhostの値を仮想マシンのIPに変更してください。...
WordPress Redux Framework <=4.2.11 - Information Disclosure
WordPress Redux Framework plugin through 4.2.11 is susceptible to information disclosure. The plugin registers several unique AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php. These are predictable, given that they are based on an md5 has...
Linux Distros Unpatched Vulnerability : CVE-2026-97610
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix uninitialized return value in netfsunbufferedwrite If preparation of the first subrequest fails, netfsunbufferedwrite exits its loop before ret is...
UBUNTU-CVE-2026-97610
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfsunbufferedwrite If preparation of the first subrequest fails, netfsunbufferedwrite exits its loop before ret is initialized. The empty-iterator check can do the same. For synchronous...
CVE-2026-97610
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfsunbufferedwrite If preparation of the first subrequest fails, netfsunbufferedwrite exits its loop before ret is initialized. The empty-iterator check can do the same. For synchronous...
UBUNTU-CVE-2026-97914
In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix ethosujobopen return value A WARNON returns a 0 or 1, not the original negative errno. Just drop the WARNON as the FD open will pass the return code to userspace and there's only one possible source of the erro...
CVE-2026-81630
The Botslab G980H dash camera firmware does not adequately verify the authenticity of firmware updates. The update process retrieves firmware through an unprotected connection and relies on an integrity value supplied with the firmware instead of a trusted cryptographic signature. A suitably...
qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit an issue with unbounded symbol value caching. This could lead to resource exhaustion, where the system runs out of available resources, ultimately causing a denial of service DoS. A denial ...
CVE-2023-51126
CVE-2023-51126 FLIR AX8 バージョン1.46.16以前は、/usr/www/res.phpを介したコマンドインジェクションに対して脆弱です。 VulnerabilityType Other コマンドインジェクション Vendor of Product FLIR Affected Component /usr/www/res.php内。パラメータvalueがコマンドを注入し、実行することができます。 Attack Type リモート Impact Code execution true Reference https://aux1.preditec.com/...
CVE-2026-24061
CVE-2026-24061 CVE-2026-24061 バッチスキャンツール 使用方法 root@kitploit: options: -h, --help show this help message and exit -t, --target TARGET Target IP/CIDR or comma-separated list repeatable -f, --file FILE File with targets IP/CIDR, one per line or comma-separated -p, --port PORT Target ports, default 2...
CVE-2026-97423 cxl/region: Validate partition index before array access
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...
CVE-2026-97423
The Linux kernel contains a vulnerability in the cxl/region component where the construct_region() function fails to validate the cxled->part value before using it as an index for the cxlds->part[] array. If a partition is never resolved, the value remains at -1 , leading to an out-of-bound...
CVE-2026-19500-poc
CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...