301673 matches found
CVE-2026-105081 ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...
EUVD-2026-97369
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to eva...
CVE-2026-108889
A flaw exists in Yungengxin Cloud Billing 2024.11.28.11 affecting the IOCTL Process Termination component. Specifically, the function sub_14000443C within the LWBilling64.sys library is vulnerable due to insufficient access control when the Pid argument is manipulated. This vulnerability can be e...
EUVD-2026-97368
A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...
CVE-2026-108836
A Server-Side Request Forgery (SSRF) vulnerability exists in Ollama versions up to 0.34.1 . The flaw is located in the IsValid function within the types/model/name.go file of the Pull API component. This vulnerability allows for remote exploitation, and public exploits have been disclosed. To rem...
CVE-2022-21907
CVE-2022-21907 Description POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. This problem exists...
CVE-2023-51214
Suggested description Cross Site Scripting vulnerability in Implementing an Activity Log in Your Web App Using PHP v.1 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Vulnerability Type Cross Site Scripting XSS Vendor of Product sourcecodester.com Affected...
CVE-2021-2109
Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...
CVE-2026-40369
π¨ CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. π Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...
CVE-2026-108829
A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuration. The manipulation of the argument configuration results in sql injection. The attack may be launched remotely. The...
Check-AAD-Connect-for-CVE-2021-36949-vulnerability
The script will check if your Azure AD Connect is running a version affected by the vulnerability described in CVE-2021-36949. Affected versions are 1.6.4.0 and 2.0.3.0. Run the script on the server that hosts the AAD Connect installation. The script also checks if the auto-upgrade feature is...
EUVD-2026-97356
A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been...
CVE-2025-27591
CVE-2025-27591 Below v0.9.0 PoC Privilege Escalation Exploit Disclaimer This exploit is intended for educational purposes only. It is designed to help users understand security vulnerabilities and improve their knowledge of cybersecurity. The author does not condone any illegal activities or...
skill-safety-bench
SkillSafetyBench SkillSafetyBench is a fully materialized benchmark for evaluating safety failures caused by attacks on skill-facing context. Each case keeps the user-facing task ordinary, while the attack is placed in local skills, helper scripts, sidecar files, corpora, templates, or other...
CVE-2026-108824
A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the argument calculated field causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2026-108828 Zen Cart Admin Panel configuration.php eval sql injection
A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipulation of the argument gID leads to sql injection. The attack may be initiated remotely. The attack is considered to ha...
SEPM-EoP
Summary Product Name : Symantec Endpoint Protection Manager Version 14 14 MP1 .2 build 1023 14.2.1023.0100 - older versions may also be affected Impact : High. A standard windows user not an admin can escalate to NT SERVICE\semwebsrv . With this user role he has access to many of the SEPM...
KidnapRAG
KidnapRAG: A Black-Box Attack for Hijacking Reasoning in Agentic Retrieval-Augmented Generation Systems π Paper | π Datasets | π Quick Start Quick Start Run the following commands from the parent directory of the cloned KidnapRAG repository. cd KidnapRAG conda create -n KidnapRAG python=3.10 cond...
EUVD-2026-97333
A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zencallfunction of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argument usefunction can lead to code injection. The attack can be...
EVTX-ATTACK-SAMPLES
Windows EVTX Samples 200 EVTX examples: This is a container for windows events samples associated to specific attack and post-exploitation techniques. Can be useful for: Testing your detection scripts based on EVTX parsing Training on DFIR and threat hunting using event logs Designing detection u...