49910 matches found
CVE-2023-40297
CVE-2023-40297 Stakater Forecastle = v1.0.144 allows directory traversal in the website component Vulnerability Type Directory Traversal Vendor of Product Stakater Affected Product Code Base Forecastle = v1.0.144 Affected Component Affected components: URL - https://www.example.com/%5C../etc/pass...
CVE-2017-0108
El componente de gráficos de Windows en Microsoft Office 2007 SP3; 2010 SP2; y Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; y Windows 7 SP1 permite a atacantes remotos ejecutar código...
CVE-2024-21893.py
CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...
CVE-2025-4664
🔒 Vulnerabilidad CVE-2025-4664 La vulnerabilidad CVE-2025-4664 es un fallo de seguridad de alta gravedad identificado en el componente Loader de Google Chrome, presente en versiones anteriores a la 136.0.7103.113. Este problema permite a un atacante remoto filtrar datos de origen cruzado mediante...
CVE-2018-10388
Este repositorio no tiene un README...
CVE-2020-17527-Tomcat
CVE-2020-17527-Tomcat...
CVE-2024-45265
CVE-2024-45265 Suggested description A SQL injection vulnerability in the poll component in SkySystem Arfa-CMS before 5.1.3132 allows remote attackers to execute arbitrary SQL commands via the psid parameter. Vulnerability Type CWE-89 | SQL Injection Vendor of Product SkySystem https://skyss.ru/...
CVE-2021-22555-esc-priv
Este repositorio no tiene un README...
Oracle-WebLogic-CVE-2017-10271-master
WebLogic Wls-wsat XMLDecoder Vulnerability Description mitre:https://vulners.com/cve/CVE-2017-3506 Earlier, hackers exploited the WebLogic WLS component vulnerability to launch large-scale remote attacks on enterprise servers. Many enterprise servers were compromised, and the number of attacked...
CVE-2019-3396
CVE-2019-3396...
CVE-2025-29306_poc
Description Published: 2025-03-27 Updated: 2025-03-27 An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Usage: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc.py -f url.txt "id"...
CVE-2023-49985
CVE-2023-49985 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "cname" parameter on "newclass" Description : A cross-site scripting XSS vulnerability in the component "newclass" of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts ...
CVE-2021-34621
CVE-2021-34621...
next.js-scanner
next.js-scanner Detection scanner for CVE-2025-55182 React Server Component Remote Code Execution Vulnerability...
Joomla! Component Jstore - 'Controller' Local File Inclusion
A directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-5286 info: name: Joomla! Component Jstore - 'Controller...
Joomla! Component Online Market 2.x - Local File Inclusion
A directory traversal vulnerability in the Online Market commarket component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1722 info: name: Joomla! Component Onlin...
TileServer API - Cross Site Scripting
tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...
Joomla! Component AWDwall 1.5.4 - Local File Inclusion
A directory traversal vulnerability in the AWDwall comawdwall component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1494 info: name: Joomla! Component AWDwall 1.5.4 - Local File Inclusion author: daffain...
Joomla! Component Music Manager - Local File Inclusion
A directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the cid parameter to album.html. id: CVE-2010-2857 info: name: Joomla! Component Music Manager - Local Fil...