santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

MS09-050

MS09-050 — SMBv2 远程代码执行漏洞利用 CVE-2009-3103 漏洞详情 Windows Vista 和 Server 2008 引入了 SMBv2，并带来了一个新的内核驱动程序 srv2.sys。该驱动程序未能验证 SMB 协商请求中的 Process Id High 字段。通过在该字段中发送一个特制的值，攻击者可使 srv2.sys 使用受控的值索引函数指针表，从而解引用攻击者提供的地址。 其结果是内核上下文中的任意代码执行，且无需身份验证。攻击者只需能够访问 445 端口。 微软于 2009 年 10 月修复了此漏洞（KB975517）。任何未打补丁的 Vist...

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure 認証バイパス CVE-2023-6329 の Python による概念実証エクスプロイトです。これは Control iD iDSecure バージョン 4.7.43.0 以下 における不適切なアクセス制御の脆弱性です。この欠陥により、認証されていないリモート攻撃者が、公開されている値（デバイスのシリアル番号、サーバー提供の nonce、ハードコードされたソルト）のみに依存した予測可能なパスワード導出アルゴリズムを悪用して、有効なログイン資格情報を再構築できます。認証後、攻撃者は Web...

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 複数のSQLインジェクション脆弱性 - studentform.php および classform.php 説明 :Simple Student Attendance System v.1.0 には、認証済みの攻撃者によって悪用される可能性のある複数のSQLインジェクション脆弱性があります。これらの脆弱性は studentform.php および classform.php に存在し、「id」パラメータを介して任意のSQLコマンドを実行することが可能です。...

Sante PACS Server.exe - Path Traversal Information Disclosure

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. id: CVE-2025-2264 info: name: Sante PACS Server.exe - Path Traversal...

LumisXP - Cross-site Scripting

A cross-site scripting XSS vulnerability in the XsltResultControllerHtml.jsp component of LumisXP v15.0.x to v16.1.x allows attackers to execute arbitrary web scripts or HTML via the lumPageID parameter. id: CVE-2024-33326 info: name: LumisXP - Cross-site Scripting author: 0xr2r severity: medium...

YesWiki Bazar Widget - Reflected XSS via 'id' Parameter

YesWiki's Bazar widget handler reflects the id GET parameter into HTML attributes using striptags only. striptags does not escape double quotes, allowing an attacker to break out of the data-formid attribute and inject arbitrary event handlers. id: CVE-2026-52774 info: name: YesWiki Bazar Widget ...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

ThinVNC - Authentication Bypass

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via a specific command, potentially leading to unauthorized access and code execution. id: CVE-2022-25226 info: name: ThinVNC - Authentication Bypass author: ritikchaddha severity: critical description: |...

Cloudlog - SQL Injection

Cloudlog 2.6.15 contains a SQL injection caused by unsanitized input in oqrs.php requestform, letting attackers execute arbitrary SQL commands via stationid or callsign, exploit requires sending crafted request. id: CVE-2024-48259 info: name: Cloudlog - SQL Injection author: s4e-io severity: high...

Contact Form Generator <= 2.5.5 - Cross-Site Scripting

The Contact Form Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in wp-admin/admin.php in versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

AVM FRITZ!Box 7530 AX - Unauthorized Access

An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. id: CVE-2024-54767 info: name: AVM FRITZ!Box 7530 AX - Unauthorized Access author: DhiyaneshDK severity: high description: | An access...

Altenergy Power Control Software - SQL Injection

A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability affects the function getstatuszigbee of the file /index.php/display/statuszigbee. The manipulation of the argument date leads to sql injection. The attack can be initiated...

Control iD iDSecure - Authentication Bypass

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

WP-Recall – Plugin <= 16.26.10 - Unauthenticated SQL Injection

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2025-6783

WHERE句に常に真となる条件を注入し、全ての行が一致するようにします: curl -i -X POST \ -H "Content-Type: application/json" \ -H "forms-id: poc-001' OR '1'='1' -- " \ -H "domain-id: example.com" \ -d ' "emabedtype":"iframe", "shortcodetitle":"INJECTED", "shortcodetag":"xss", "active":0 ' ...

CVE-2025-59342

CVE-2025-59342 - パストラバーサル esm-dev 作者: Byte Reaper 説明 CVE-2025-59342 は、esm.sh におけるパストラバーサルの脆弱性です。esm.sh は、現代のWeb開発向けのノービルド・コンテンツデリバリネットワーク CDN であり、バージョン136以前が影響を受けます。 問題は、X-Zone-Id HTTPヘッダーの処理に存在します。このヘッダーはファイルシステムパスを構築するために使用されますが、ヘッダーの値が適切に正規化されておらず、アプリケーションのストレージベースディレクトリに制限されていません。...

CacheData_decrypt

CacheDatadecrypt Windows EntraId CacheData をブルートフォース（BF）して復号するためのシンプルなツールキットです。 usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTEM. The script will automatically iterates on...