Dubbo-CVE-2020-1948

Apache Dubbo CVE-2020-1948 测试环境 引子 在这个漏洞出现之初，为了验证该漏洞的危害，我们从互联网上搜寻了很多人整理的例子，发现没有一个能够顺利验证该漏洞，故自己搞了一个，放在这里供大家参考，欢迎交流！ 本环境基于 Apache Dubbo 官方示例环境改造而来，纠正了官方示例程序中几处编译中报错问题。例如： 官方示例代码中应用的 DubboService 类，实际应该 Service。 编译 cd src mvn package 编译成功后会在 src/target 目录生成 dubbo.jar 文件。 运行 java -jar target/dubbo.ja...

WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Nikstore Core versions = 1.5...

GHSA-GR72-P8G3-6GPC vulnerabilities

Vulnerabilities for packages: linux-gcp...

Excessive Iteration

Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Excessive Iteration in the parsing process of font width entries with unusually large values. An attacker can cause excessive...

Improperly Controlled Sequential Memory Allocation

Overview org.webjars.npm:mermaid is a package for generation of diagrams and flowcharts from text in a similar manner as markdown. Affected versions of this package are vulnerable to Improperly Controlled Sequential Memory Allocation in the setXAxisRangeData function when configuring an X-Axis wi...

CVE-2025-12345

A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1. The affected element is the function agentdeployinit of the file /agents/deploy/initiate.c of the component Agent Deployment. Such manipulation leads to buffer overflow. It is possible to launch the attack...

Exploit for CVE-2024-12345

CVE Exchange Stop chasing vulnerability intel across fragme...

PT-2026-3861

Name of the Vulnerable Software and Affected Versions NexusFlow API Gateway versions prior to 3.8.1 Description A critical remote code execution issue exists in NexusFlow API Gateway. This issue is actively exploited by unauthenticated attackers, allowing them to gain full control of servers. The...

CVE-2020-12345

Improper permissions in the installer for the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

EUVD-2000-0202

Malware in sbrugna...

EUVD-2017-16705

Malware in sbrugna...

CVE-2023-12345

creationtimestamp| type| source ---|---|--- 2025-04-03 17:56:13+00:00| seen| https://gist.github.com/mranv/8aebbbe6c455c386cbd3fef9d8647ca6 2025-04-03 17:58:38+00:00| seen| https://gist.github.com/mranv/eb450fd1403beaf6f27170e086effd8f 2025-04-15 22:57:59+00:00| seen|...

CVE-2025-12345

creationtimestamp| type| source ---|---|--- 2025-03-07 07:20:14+00:00| seen| https://bsky.app/profile/calebpr.bsky.social/post/3ljrhu2oivl2x 2025-03-26 19:42:10+00:00| seen| https://bsky.app/profile/calebpr.bsky.social/post/3llck6bd76n2g 2025-05-06 14:49:58+00:00| seen|...

CVE-2024-12345

creationtimestamp| type| source ---|---|--- 2025-01-27 11:06:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113899992485971241 2025-01-27 11:15:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpstcow3g2t 2025-01-27 14:19:26+00:00| seen|...

CVE-2024-12345 INW Krbyyyzo Daily Huddle Site gbo.aspx resource consumption

A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack o...

CVE-2024-12345 INW Krbyyyzo Daily Huddle Site gbo.aspx resource consumption

A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack o...

CGA-CV7C-8G87-Q76W

Bulletin has no description...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WP htaccess Control plugin = 3.5.1 versions...

Spotlight server-side Share Path Disclosure

Description As part of the Spotlight protocol, the initial request returns a path associated with the sharename targeted by the RPC request. Samba returns the real server-side share path at this point, as well as returning the absolute server-side path of results in search queries by clients. Kno...

Webgrind 1.1 - Reflected Cross-Site Scripting (XSS) & Remote Command Execution (RCE)

Exploit Title: Webgrind 1.1 - Reflected Cross-Site Scripting XSS & Remote Command Execution RCE Discovery by: Rafael Pedrero Discovery Date: 2022-02-13 Vendor Homepage: http://github.com/jokkedk/webgrind/ Software Link : http://github.com/jokkedk/webgrind/ Tested Version: 1.1 Tested on: Windows 1...