tomcat-embed-core-9.0.31-CVE-2020-11996

请参见 TestHttp2Section51.java 的 testImplicitCloseLargeId 单元测试中的 PoC：https://github.com/rusakovichma/tomcat-embed-core-9.0.31-CVE-2020-11996/blob/master/test/org/apache/coyote/http2/TestHttp2Section51.java...

CVE-2021-21042

CVE-2021-21042 灵感来源于 https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag...

CVE-2026-88065 `tts-be` application has a Broken Access Control vulnerability

tts-be is a backend for a timetable selector that aims to help students better choose their class schedules. Versions prior to 2.1.0 have a Broken Access Control vulnerability across several API endpoints such as /api/student/id/photo and /api/courseunit/id/exchange/metadata. By chaining these...

CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and...

DEBIAN-CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and...

CVE-2026-92240

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and...

CVE-2026-68529

Concrete CMS 9.0.0 through 9.5.2 contained an authorization bypass in the Express entries advanced-search dashboard action. The advanced_search() method in DashboardSelectableExpressEntryListTrait resolved an Express entity from a user-supplied entity ID without invoking canViewExpressEntries(), ...

Authentication Bypass

Apache CXF is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of required claims in self-issued OIDC ID tokens, including issuer, subject, audience, time, and subjwk binding, which allows an attacker to craft malicious tokens and bypass authentication when...

CVE-2026-89022

BookStack before 26.05.5 contains an authentication bypass vulnerability in its social login implementation that allows unauthenticated attackers to sign in as arbitrary users by authenticating through a different social provider sharing the same driverid namespace. Attackers can authenticate at...

CVE-2025-28073

CVE-2025-28073 建议描述 phpList 3.6.3 存在反射型跨站脚本（XSS）漏洞，该漏洞位于 /lists/dl.php 端点。攻击者可以通过操纵 id 参数注入任意 JavaScript 代码，该参数未正确进行转义处理。 漏洞类型 跨站脚本（XSS） 厂商 phpList 受影响产品代码库 phpList - 3.6.15（可能包含更早版本） 受影响组件 phpList /lists/dl.php, phpList 3.6.15（可能包含更早版本） 攻击类型 远程 其他影响 会话劫持、凭据窃取、钓鱼攻击、任意JavaScript执行 攻击向量 该漏洞可通过包含恶意...

CVE-2026-89022

BookStack before 26.05.5 is affected by an authentication bypass in its social login implementation. The root cause lies in SocialAuthService::handleLoginCallback , whose database query ignores the driver column when retrieving linked account records, allowing an unauthenticated attacker to authe...

CVE-2019-13361

CVE-2019-13361 如何 数据包1：攻击者更新Wi-Fi设置 数据包2：设备回复其ID及成功/错误代码 数据包3：攻击者利用该ID解除设备布防...

CVE-2026-75983

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the PermissionManager::managepermissions function being registered as a callback on WordPress core's...

CVE-2026-91004

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2026-15758

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data...

CVE-2026-75983

The Eventin WordPress plugin (≤ 4.1.23 ) contains a privilege escalation vulnerability in PermissionManager::manage_permissions(), which is hooked into WordPress's map_meta_cap filter and unconditionally returns an always-true primitive for user ID 1 without scoping to plugin-specific capabilitie...

EUVD-2026-78298

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.1.23. This is due to the PermissionManager::managepermissions function being registered as a callback on WordPress core's...

CVE-2026-91004 SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...

CVE-2026-91004

A SQL injection vulnerability exists in SourceCodester Online Faculty Clearance System 1.0 , specifically in the /delete_faculty1.php file. An unauthenticated remote attacker can manipulate the ID parameter to inject arbitrary SQL, potentially leading to low-impact confidentiality, integrity, and...

EUVD-2026-78283

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of the file /deletefaculty1.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to th...