167908 matches found
CVE-2026-107803
ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...
CVE-2026-104629
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
CVE-2026-101022
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
CVE-2024-21683-RCE
用法 python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 POC...
CVE-2026-104629 Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or Code
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
CVE-2026-104629
The openPDC and openHistorian software products are vulnerable to unsafe reflection due to a flaw in their component loading mechanism. The system will construct and execute any specified type, which can be exploited to run arbitrary constructor code . An attacker with authenticated user account ...
EUVD-2026-95783
A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated user account and the ability to place a file on the host filesystem can use this to run arbitrary constructor code, an...
CVE-2024-54679
CVE-2024-54679 CVE-2024-54679 - CyberPanel（又名 Cyber Panel）拒绝服务漏洞 描述 在 Cyber Panel 中发现了一个拒绝服务（DoS）漏洞，允许任何经过身份验证的用户通过发送请求到 /dataBases/restartMySQL 端点来重启数据库。该漏洞出现在 Cyberpanel/databases/views.py 文件第 400 行的 restartMySQL 函数中，该操作在执行前未检查用户权限（ACL）。该函数首先从会话中获取用户 ID（身份验证检查），然后调用 mysqlUtilities 类中的...
CVE-2023-46747-RCE
漏洞详情 fofa： title="BIG-IP" || iconhash="-335242539" shodan title:"BIG-IP" 受影响版本 https://my.f5.com/manage/s/article/K000137353 漏洞复现 1. 此时，这里用户仅为 admin： 2. 执行脚本： git clone https://github.com/W01fh4cker/CVE-2023-46747-RCE.git cd CVE-2023-46747-RCE pip install -r requirements.txt python...
CVE-2015-6967
CVE-2015-6967 python exploit.py --url http://xx.xx.xx.xx --username admin --password nibbles --payload phprevshell.php 将 phprevshell.php 第 7 行的 $ip 更改 nc -lvnp 1234...
CVE-2026-107803 ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter
ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...
CVE-2026-107803
The open-source workflow management software ProcessMaker is vulnerable to SQL injection in the GET /api/1.0/tasks endpoint prior to version 2026.14.3 . The root cause is located in ProcessMaker raits askcontrollerindexmethods::applycolumnordering(), where the application concatenates a user-cont...
EUVD-2026-95777
ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...
SharpMove
SharpMove - 对远程主机进行 .NET 认证执行 编译 要编译，请打开 Visual Studio 项目并编译为发布版本。 选项 WMI SCM DCOM 多种 任务计划程序 服务 DLL 劫持 DCOM 服务器劫持 修改计划任务 修改服务 binpath SharpMove.exe action=query computername=remote.host.local query="select from win32process" username=domain\user password=password SharpMove.exe action=create...
CVE-2026-106429
A flaw was found in libmongocrypt. An integer underflow in the Key Management Service KMS endpoint-parsing logic can cause a memory allocation failure when processing a malformed endpoint. An authenticated user can trigger this flaw by modifying a key document in the key vault collection or by...
CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC
CVE-2025-2304 — Camaleon CMS 批量赋值权限提升（PoC） Camaleon CMS /updatedajax 发送 PATCH 请求，并在密码参数中注入 passwordrole=admin。 4. 验证角色已更新为 admin。 环境要求 Python 3 安装依赖： python3 -m venv venv source venv/bin/activate python3 -m pip install requests beautifulsoup4 使用方法 python3 exploit.py http://TARGET -u USER -p PASS...
CVE-2026-106433
A flaw was found in libmongocrypt. This vulnerability allows an authenticated attacker with permissions to modify key vault documents, or a malicious server returning crafted documents, to cause process memory corruption or a Denial of Service DoS by crashing the application. The issue occurs...
CVE-2019-19609
CVE-2019-19609 Strapi = 3.0.0-beta.17.8 经过身份验证的远程代码执行...
CVE-2023-50564
CVE-2023-50564 📌 描述 此漏洞允许 Pluck CMS v4.7.18 中经过认证的管理员上传一个包含 PHP 后门的恶意 ZIP 模块，从而导致远程代码执行 RCE。 ⚙️ 功能特点 使用有效的用户名和密码对目标进行身份验证 自动从提供的 PHP 文件创建 ZIP 压缩包 将模块上传到存在漏洞的 installmodule 端点 触发载荷并显示输出 支持自定义目标、端口、凭据和 shell 路径 🚀 使用方法 git clone https://github.com/glynzr/CVE-2023-50564.git cd CVE-2023-50564 pip3...