Mlflow <2.8.0 - Local File Inclusion

Mlflow before 2.8.0 is susceptible to local file inclusion due to path traversal in GitHub repository mlflow/mlflow. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2023-6977...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 是一个高优先级漏洞（CVSS 7.5），可通过 Grafana 应用程序中已安装的插件导致任意文件读取。 该漏洞影响版本 8.0.0-beta1、8.0.0 至 8.3.0。 仅在 8.2.0 上测试过。该漏洞利用方式是创建一个易受攻击的插件列表，然后发送 HTTP 请求检查插件是否已安装。 在检查过程中，它会尝试获取 fileread 选项中指定的文件。 使用示例： python3 cve-2021-43798.py -t 127.0.0.1 -p 3000 -f /etc/passwd...

boot-jackson-cve

复现 Spring Boot 2.5.10 中的 CVE-2020-36518 执行： ./mvnw clean verify 它会失败并显示： ERROR Failed to execute goal org.owasp:dependency-check-maven:7.0.0:check default on project jackson-demo: ERROR ERROR One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equa...

CVE-2025-55184_Testing

CVE-2025-55184Testing 用于测试 CVE-2025-55184 的 Python 脚本 CVE-2025-55184 – React 服务器组件 DoS 扫描器 一个安全、无害的验证脚本 ，用于检测 CVE-2025-55184 ，这是一个影响 React 服务器组件 RSC 的拒绝服务 DoS 漏洞。 本工具仅用于内部安全测试和受控评估。 它只能在你拥有或明确授权测试的系统上使用。 概述 CVE-2025-55184 - 拒绝服务 DoS 严重性：高 | CVSS 评分：7.5 CVE-2025-55184 影响 React 服务器组件使用的反序列化逻辑。 精心构造...

testng-team__testng_CVE-2022-4065_7-5

文档可在 TestNG 官方网站 获取。 发布说明 7.4.0 7.3.0 7.1.0 7.0.0 需要帮助？ 在提交新问题之前，请在以下地方提问： Google 群组 StackOverflow 如果你在两个站点都发布了问题，请提供另一个问题的链接，以避免重复回答。 你确定是 TestNG 的 bug 吗？ 在提交问题之前，尝试在 shell 窗口 中重现问题。 如果问题在 shell 中不存在，请首先检查问题是否存在于运行器的错误跟踪器上，并首先在那里提交问题： Eclipse: https://github.com/cbeust/testng-eclipse/issues...

CVE-2020-3452

CVE-2020-3452 CVSS 7.5（基准） wget https://bit.ly/32Q065t wget https://vpn.target.local:443/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ wget...

CVE-2026-87237

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-83156

Vulnerability in the Oracle XML Developers Kit component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having XDKC privilege with network access via Oracle Net to...

EUVD-2026-79929

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this...

EUVD-2026-79892

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

EUVD-2026-79876

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87221

Oracle Hyperion Financial Management (component: Security ), version 11.2.26.0.000 , is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data. The impact is limited to con...

EUVD-2026-79845

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87148

CVE-2026-87148 affects Oracle Hyperion Data Relationship Management (component: Access and security), specifically version 11.2.26.0.000 . An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash, resulting in a complete denial of service . The CVSS...

CVE-2026-83289

CVE-2026-83289 is a vulnerability in Oracle Business Intelligence Enterprise Edition (Oracle Analytics), specifically in the Analytics Web General component. Supported versions affected are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . The flaw is exploitable over the network via SOAP by a low-privi...

CVE-2026-83263

Oracle Product Lifecycle Analytics (Oracle Supply Chain), version 3.6.1 , is affected by a vulnerability in the Installation Issues component. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to achieve a takeover of the product, impacting confiden...

CVE-2026-83034

Oracle WebCenter Sites (Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by an unauthenticated vulnerability exploitable over HTTP . An attacker with network access can achieve unauthorized access to critical data or complete access to all accessible WebCenter Sites data,...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

EUVD-2026-78904

In Concrete CMS 9.0 to 9.5.2, the Top Navigation Bar block did not HTML-escape dropdown child page names before writing them into the page, so a user who could create or rename pages could store a script through a child page name and have it run in the browser of any visitor, editor, or...

PT-2026-92814

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description An issue exists in the Platform Security component of Oracle Business Intelligence Enterprise...