47753 matches found
CVE-2026-76982 Apache Wicket: XSS in Button via its model object
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it write...
EUVD-2026-68489
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.form.Button clears the escape-model-strings flag in its constructor, so that the value attribute it writes is not encoded twice — ComponentTag already encodes attribute values when it write...
CVE-2018-6574
Este repositorio no tiene un README...
USN-8694-1 openjdk-21-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of CRaC JDK 21 did not correctly authorize users. A remote...
USN-8693-1 openjdk-17-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of CRaC JDK 17 did not correctly authorize users. A remote...
CVE-2022-37969
CVE-2022-37969...
CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE
CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 Description CVE-2024-21182 is an unauthenticated JNDI injection vulnerability affecting the Core component of Oracle WebLogic Server. It allows a remote attacker, vi...
Issabel Authenticated - Remote Code Execution
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...
CVE-2020-8835
CVE-2020-8835...
samsung-bixby-command-execution-cve-2026-21055-improper-component-export
CVE-2026-21055 PoC — Exportación Incorrecta de Componentes de Samsung Bixby Prueba de concepto para CVE-2026-21055 : La exportación incorrecta de componentes de aplicaciones Android en Samsung Bixby anterior a la versión 4.0.70.8 permite a atacantes locales ejecutar comandos arbitrarios con...
PageBuilderCK-CVE-2026-56290-Exploit
Page Builder CK — Sonda RCE fonts.save CVE-2026-56290 BlackHat Team escáner de prueba de concepto para la vulnerabilidad fonts.save del componente Page Builder CK de Joomla. POC CVE-2026-56290 Autor: @mrzblackhat Equipo: BlackHat Team Créditos: Peyman Siyahi · MR.PERSIA Descripción general Esta...
CVE-2026-50229
⚡ CVE-2026-50229 — Explotación XSS de Apache Tomcat Examples...
CVE-2026-56290
CVE-2026-56290 - Compagebuilderck Mass Exploit ⚠️ Disclaimer This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal Use this tool only on systems you own or have explicit permission to test The author is not responsible for an...
rschunter
RSC Hunter Una herramienta potente de escaneo y explotación multi-hilo para vulnerabilidades en React Server Component RSC. Esta herramienta está diseñada para identificar y explotar vulnerabilidades RCE en implementaciones de RSC, con soporte para diversas técnicas y estrategias de bypass. Nota ...
CVE-2026-9809
CVE-2026-9809 CVE-2026-9809 es una vulnerabilidad de Cross-Site Scripting Almacenado Stored XSS que afecta a Mautic 7 versiones 7.0.0 a 7.1.1. La falla existe en el componente Projects, donde los nombres de los proyectos se muestran como etiquetas y popovers al pasar el cursor en páginas...
CVE-2026-82589
Open5GS (up to 2.7.7) contains a denial-of-service vulnerability in the N1-N2 Message Handler component, specifically in the function amf_namf_comm_handle_n1_n2_message_transfer within src/amf/namf-handler.c. Manipulation of the field N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoConten...
Unauthenticated-RCE-FUXA-CVE-2023-33831
RCE sin autenticación FUXA CVE-2023-33831 La vulnerabilidad afecta al componente de scripting de FUXA, debido a la falta de control o saneamiento en las entradas que pueden ser controladas por los usuarios, permitiendo así el uso de métodos peligrosos que pueden escalar a ejecución remota de...
CVE-2023-38646
CVE-2023-38646...