CVE-2026-31156

CVE-2026-31156 Esiste una vulnerabilità di path injection in OpenPLC-v3, che deriva dal fatto che il programma non esegue alcun controllo di validità sui parametri del percorso file passati dalla riga di comando. Gli attaccanti possono leggere qualsiasi file leggibile costruendo percorsi malevoli...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2024-10914__POC

CVE-2024-10914 - Proof of Concept Exploit per vulnerabilità di iniezione di comandi nell'endpoint /cgi-bin/accountmgr.cgi. Questa vulnerabilità permette di eseguire comandi arbitrari sul sistema affetto attraverso parametri non sanitizzati. Descrizione della Vulnerabilità CVE-2024-10914 è una...

CVE-2024-34693

CVE-2024-34693: Lettura Arbitraria di File dal Server in Apache Superset Vulnerabilità di convalida impropria dell'input in Apache Superset che consente a un attaccante autenticato di creare una connessione MariaDB con localinfile abilitato. Abilitando localinfile nel client MySQL/MariaDB di...

CVE-2020-8163

CVE-2020-8163 CVE-2020-8163 - Esecuzione di codice remota dei nomi locali forniti dall'utente in Rails Esecuzione di codice remota dei nomi locali forniti dall'utente in Rails 5.0.1 C'era una vulnerabilità nelle versioni di Rails precedenti alla 5.0.1 che avrebbe permesso a un attaccante che...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Exploit RCE di Searchor PoC Esecuzione remota di codice RCE tramite uso non sicuro di eval in Searchor --test Esegui comando personalizzato Esegui qualsiasi comando sul server di destinazione: python3 CVE-2023-43364.py -a "whoami" Esempi: python3 CVE-2023-43364.py -a "TF=$mktemp...

CVE-2026-34498

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ estende le capacità di scansione attiva e passiva di Burp Suite. Progettato per aggiungere un overhead di rete minimo, identifica comportamenti dell'applicazione che potrebbero interessare ai tester avanzati: Potenziali attacchi host header avvelenamento del reset...

EUVD-2026-93398

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

CVE-2026-34498 L4L

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

CVE-2026-34498

An improper input validation vulnerability exists in Johnson Controls Illustra Standard - L4L China on Windows platforms. This flaw allows for OS Command Injection , specifically affecting versions before 6.0.0.66394 . The documents do not provide specific technical details regarding the vulnerab...

CVE-2026-12380

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the E-Commerce Pack by Akıllı Ticaret Software Technologies Ltd. Co. due to improper neutralization of input during web page generation. This flaw allows attackers to execute malicious scripts in a user's browser. The issue affects ve...

CVE-2026-56596

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

EUVD-2026-93373

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596

The HCL BigFix Service Management software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to provide malformed or unexpected data, potentially leading to processing errors , business logic bypasses , and unintended application behavior . The ...