CVE-2020-11981-PoC

Example Build demo stand docker-compose up -d VM docker-container: 172.18.0.2 Command PoC docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt INFO Vulnerability description: The...

CVE-2026-11981

creationtimestamp| type| source ---|---|--- 2026-07-01 12:41:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk2tcsb32l 2026-07-01 22:03:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjhhnwhj2o...

CVE-2026-11981 GiveWP <= 4.15.3 - Cross-Site Request Forgery

The GiveWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.15.3 This is due to missing nonce validation on the givesetnotificationstatushandler function. This makes it possible for unauthenticated attackers to disable donation email notificatio...

CVE-2025-11981 School Management System – WPSchoolPress <= 2.2.23 - Authenticated (Administrator+) SQL Injection

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'SCodes' parameter in all versions up to, and including, 2.2.23 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

WordPress School Management System – WPSchoolPress plugin <= 2.2.23 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by dutafi in WordPress Plugin WPSchoolPress versions = 2.2.23...

EUVD-2019-11981

Malware in sbrugna...

EUVD-2020-11981

Malware in sbrugna...

CVE-2024-11981

creationtimestamp| type| source ---|---|--- 2024-11-29 06:29:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113564829002428472...

CVE-2024-11981

CVE-2024-11981 affects Billion Electric routers (e.g., M100, M150, M120N, M500). The vulnerability is an authentication bypass that allows unauthenticated attackers to retrieve contents of arbitrary web pages. Public details in multiple sources confirm the issue and affected models. No explicit r...

CVE-2024-11981 Billion Electric router - Authentication Bypass

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

CVE-2024-11981 Billion Electric router - Authentication Bypass

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages...

PT-2023-11981

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not assigne...

MSC-2023-11981

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

Apache Airflow < 1.10.11 Multiple Vulnerabilities

The version of Apache Airflow is prior to 1.10.11. It is, therefore, affected by multiple vulnerabilities, including the following: - An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker Redis, RabbitMQ directly, it i...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=0.1.1, <=1.1.0) +20 more potentially affected by CVE-2020-11981 via apache-airflow (>=1.8.2, <=1.10.10)

apache-airflow PYPI version =1.8.2, =0.5.1, =0.1.1, =2.4.2, =1.0.1, =1.2.1, =0.1.3a0, =0.4.0rc2, =1.7.2, =0.1.0, =0.24.11, =0.24.11, =0.24.14, =0.50.1, =0.24.14, =0.25.7 and more Source cves: CVE-2020-11981 Source advisory: OSV:GHSA-976R-QFJJ-C24W...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=0.1.1, <=1.1.0) +20 more potentially affected by CVE-2020-11981 via apache-airflow (>=1.8.2, <=1.10.10)

apache-airflow PYPI version =1.8.2, =0.5.1, =0.1.1, =2.4.2, =1.0.1, =1.2.1, =0.1.3a0, =0.4.0rc2, =1.7.2, =0.1.0, =0.24.11, =0.24.11, =0.24.14, =0.50.1, =0.24.14, =0.25.7 and more Source cves: CVE-2020-11981 Source advisory: GHSA-976R-QFJJ-C24W...

CVE-2020-11981

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker Redis, RabbitMQ directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands...

airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=0.1.1, <=1.1.0) +20 more potentially affected by CVE-2020-11981 via apache-airflow (>=1.8.2, <=1.10.10)

apache-airflow PYPI version =1.8.2, =0.5.1, =0.1.1, =2.4.2, =1.0.1, =1.2.1, =0.1.3a0, =0.4.0rc2, =1.7.2, =0.1.0, =0.24.11, =0.24.11, =0.24.14, =0.50.1, =0.24.14, =0.25.7 and more Source cves: CVE-2020-11981 Source advisory: OSV:PYSEC-2020-15...

CVE-2020-11981

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker Redis, RabbitMQ directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands...

CVE-2020-11981

CVE-2020-11981 affects Apache Airflow versions 1.10.10 and earlier when using CeleryExecutor with direct access to the broker (Redis or RabbitMQ). The underlying issue allows an attacker who can connect to the broker to inject commands, enabling the celery worker to run arbitrary commands and pot...