CVE-2026-89267

starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when it is configured as an empty list. As a result, authenticated users can submit structured filter queries via the list API's where parameter to perform equality and comparison operations on columns ...

CVE-2026-89267 starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass

starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchablefields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality an...

Linux Distros Unpatched Vulnerability : CVE-2026-81009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as...

CVE-2022-23305_POC

CVE-2022-23305 Log4j JDBCAppender SQL 注入 POC 这是一个非常简单的基于 Spring Boot 的应用程序，用于演示 CVE-2022-23305 漏洞。它使用 Apache Maven、Spring Boot、Spring MVC 和 H2 内存数据库来记录一条简单的日志条目，该条目取自 URL 查询字符串参数。由于 Log4J 被配置为使用 JDBCAppender，因此它容易受到 SQL 注入攻击。 有关日志记录语句，请参阅 src/main/java/poc/InjectionController.java。 有关所有配置文件，请参阅...

CVE-2026-81009

A flaw was found in the Linux kernel. The iouring/query interface, specifically within the iohandlequeryentry function, does not properly cap the user-provided size when zeroing memory. A local attacker can exploit this by sending a specially crafted query that requests an excessively large amoun...

CVE-2025-50110

CVE-2025-50110 EagleEyes Lite Android 应用程序中敏感信息的明文传输 1. 概述 名称 : EagleEyesLite 版本 : 2.0.0 厂商 : AVTECH CWE : CWE-319: 敏感信息的明文传输, CWE-598: 使用带敏感查询字符串的 GET 请求方法 CVSS : 8.8 高 向量字符串 : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2. 摘要 在 EagleEyes Lite（版本 2.0.0）中，GetHttpsResponse 方法直接将账户...

CorruptQueryAccessWorkaround

CorruptQueryAccessWorkaround：查询 '' 已损坏 针对 CVE-2019-1402 在 MS Access 中引入的「查询已损坏https://support.office.com/en-us/article/access-error-query-is-corrupt-fad205a5-9fd4-49f1-be83-f21636caedec」错误的最新解决方法。 还有其他一些解决方法需要在管理级别应用，例如卸载错误的更新。与此相比，这里提供的解决方法的意图是通过自动更改 MDB/ACCDB 内容本身来工作，且工作量尽可能小。 注意 微软确实在...

CVE-2026-81009

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

UBUNTU-CVE-2026-81009

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

CVE-2026-81009

CVE-2026-81009 affects the Linux kernel in the io_uring/query subsystem. The function io_handle_query_entry() clamps hdr.size for the inbound copy_from_user() but retains the original user-supplied value as usize. When passed to copy_struct_to_user(), an oversized usize triggers clear_user() on t...

EUVD-2026-76332

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

CVE-2026-81009 io_uring/query: cap user size passed to copy_struct_to_user

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

CVE-2026-49463

NL Portal Backend Libraries (Dutch government portal backend) contained a missing per-user authorization in two GraphQL resolver areas. The nl.nl-portal:documenten-api package (all versions up to 3.0.0) and nl.nl-portal:besluiten package (1.5.0–3.0.0) both declared resolvers without an authentica...

CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version 1.17.10 and 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored fil...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - PHP CGI 参数注入漏洞（Windows "WorstFit"） 概述 CVE-2024-4577 是 Windows 上 PHP CGI 实现中的一个严重远程代码执行漏洞。它绕过了原始 CVE-2012-1823 的修复，利用了 Windows "最佳匹配"（Best-Fit）代码页转换功能，通过 CGI 查询字符串夹带命令行参数。 CVSS 评分： 9.8（严重） 发现者： Orange Tsai（DEVCORE） 类型： 操作系统命令注入 / 参数注入 补丁日期： 2024 年 6 月 6 日 技术细节 当 PHP 以 CGI...

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – Envenenamiento de caché HTTP mediante un parámetro de consulta no clave Descripción general Una caché web utiliza únicamente la ruta de la URL como clave de caché, ignorando los parámetros de consulta. Un atacante puede añadir una carga útil maliciosa a un parámetro no clave p...

dnsprobe

注意 - 该项目已停止维护。新的更新和修复将推送到 dnsx。 DNSProbe 是一个基于 retryabledns 构建的工具，允许你使用用户提供的解析器列表执行多个选择的 DNS 查询。 资源 资源 功能 用法 安装说明 从源码安装 在 Docker 容器中运行 查询主机的 A 记录 查询主机的 CNAME 记录 查询 Subfinder 输出的 CNAME 记录 许可证 功能 简单便捷的 DNS 记录查询工具。 用法 root@kitploit: dnsprobe -h 这将显示工具的帮助信息。以下是所有支持的选项。 安装说明 从源码安装 dnsprobe 需要 go1.13+...

CVE-2026-84960

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2026-78172

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...