CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE 检测与利用工具 针对CVE-2024-21762的检测与利用工具 - FortiGate SSL VPN 严重漏洞 ⚠️ 法律声明 ：本工具仅供在授权测试环境中使用 。未经授权在系统上使用是非法的 ，可能导致严重的法律后果。 概述 CVE-2024-21762 是 FortiGate SSL VPN 组件中的一个严重漏洞，允许预认证远程代码执行（RCE） 。该漏洞存在于对使用 Transfer-Encoding: chunked 的 HTTP 请求的解析中，导致 sslvpnd 组件发生越界写入。 技术细节 属性...

CVE-2026-106580 ImageMagick: Policy Bypass in CUT encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

CVE-2026-106580 ImageMagick: Policy Bypass in CUT encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

CVE-2023-25581

此 Python 脚本演示了如何利用 pac4j-core 中的 CVE-2023-25581 漏洞。该漏洞允许攻击者通过反序列化恶意构造的 Base64 编码数据执行任意代码（远程代码执行，RCE）。 先决条件 在运行脚本之前，请确保已安装以下内容： Python 3.x：下载 Python requests 库：通过运行以下命令进行安装： bash pip install requests 使用方法 克隆仓库： 将此仓库克隆到本地机器： bash git clone https://github.com/p33d/CVE-2023-25581 cd CVE-2023-25581...

BIT-APACHE-2026-63718 Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

CVE-2026-105241

A flaw was found in Apache log4net. An attacker who can supply data that is recorded in system logs can submit unencodable Unicode characters, triggering an encoding error in the SmtpPickupDirAppender component. When this failure occurs, the application discards all buffered log messages in the...

CVE-2013-2028_Checker

CVE-2013-2028 - Nginx HTTP 服务器 1.3.9-1.4.0 分块编码栈缓冲区溢出 描述 nginx 1.3.9 至 1.4.0 版本中 http/ngxhttpparse.c 文件的 ngxhttpparsechunked 函数允许远程攻击者通过一个带有超大分块大小的分块传输编码请求造成拒绝服务（崩溃）并执行任意代码，该漏洞触发整数符号错误和基于栈的缓冲区溢出。 示例 $ python3 nginxcve20132028checker.py http://172.17.0.3 ! Target: http://172.17.0.3 Nginx version:...

CVE-2025-65300

CVE-2025-65300 Descripción CVE-2025-65300: Vulnerabilidad de Cross-Site Scripting XSS almacenado en la plataforma SaaS de Coohom Fecha de divulgación: 2025-10-28 Última actualización: 2025-10-28 Reportero: Phisit Pupiw Proveedor: Coohom CWE: CWE-79 – Cross-Site Scripting Resumen Se identificó una...

GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read

GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...

CVE-2025-63588

CVE-2025-63588 CMSimpleXH cmsimplexh 路径处理中的反射型跨站脚本（XSS）漏洞 预估 CVSS v3.1 评分： AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1（中危） 分配的 CVE： CVE-2025-63588 受影响产品： CMSimpleXH - 1.8 厂商： CMSimpleXH - https://www.cmsimple-xh.org/ 摘要 CMSimpleXH 处理动态登录相关输入的前端路由解析代码中存在一个反射型跨站脚本（XSS）漏洞。该应用程序将从请求 URI...

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupD...

CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSys...

PT-2026-107569

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

DEBIAN-CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

CVE-2026-105244

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

DEBIAN-CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

CVE-2026-105241

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 surrogate, made the write throw. Every buffered event in the batch was discarded, not only the one carrying the content,...

CVE-2026-105244

The Apache log4net logging framework (versions 1.2.12 before 3.5.0 ) contains an Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender component. Instead of escaping non-ASCII characters and control characters (like tabs), the appender silently deletes them. This allow...

CVE-2026-105244 Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...

EUVD-2026-93870

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record instead of being escaped, so non-ASCII text and control characters such as tabs disappeared without notice. A party whos...