CVE-2009-2265

此存储库没有 README。...

zaphoxx-coldfusion

zaphoxx-coldfusion 基于 https://cvedetails.com/cve/CVE-2009-2265/ 的 coldfusion 漏洞利用 我为这个特定 CVE 编写 Python 脚本的主要原因是，在我试图解决 HTB 机器 Arctic 时，Metasploit 的同款利用模块对我不起作用。另外，稍微练习一下 Python 也不错。不过，还有一个由 Alexander Reid 最初编写的同款漏洞 Python 利用版本，如果你更愿意使用他的版本的话。 使用方法非常简单： 请确保你已创建好一个 payload 文件 例如，使用 msfvenom： msfven...

Adobe-ColdFusion-8-RCE-CVE-2009-2265

Adobe ColdFusion 8 - Exploit de Ejecución Remota de Comandos RCE Resumen Este exploit apunta a una vulnerabilidad conocida en Adobe ColdFusion 8 CVE-2009-2265. Permite la ejecución remota de comandos RCE mediante la subida de un payload JSP malicioso que establece una conexión de shell inversa...

CGA-3P58-PX7F-2265

Bulletin has no description...

MINI-58X7-2265-GCXP

Bulletin has no description...

CVE-2026-2265

An unauthenticated remote code execution RCE vulnerability exists in applications that use the Replicator node package manager npm version 1.0.5 to deserialize untrusted user input and execute the resulting object...

@belym.a.2105/testcafe (>=0.13.0-nightly.96bf9c47, <=1.15.0-alpha.4), @benbender/jest-config (>=0.1.0, <=0.6.0) +128 more potentially affected by CVE-2026-2265 via replicator (1.0.5)

replicator NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on replicator and may be impacted: - @belym.a.2105/testcafe =0.13.0-nightly.96bf9c47, =0.1.0, =1.8.5, =0.1.0-alpha.1, =1.1.4-alpha.30, =0.0.49, =3.7.4-depup.0, =0.0.0, =1.0.1,...

@belym.a.2105/testcafe (>=0.13.0-nightly.96bf9c47, <=1.15.0-alpha.4), @benbender/jest-config (>=0.1.0, <=0.6.0) +128 more potentially affected by CVE-2026-2265 via replicator (1.0.5)

replicator NPM version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on replicator and may be impacted: - @belym.a.2105/testcafe =0.13.0-nightly.96bf9c47, =0.1.0, =1.8.5, =0.1.0-alpha.1, =1.1.4-alpha.30, =0.0.49, =3.7.4-depup.0, =0.0.0, =1.0.1,...

CVE-2026-2265

creationtimestamp| type| source ---|---|--- 2026-04-01 18:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihc6tjdu225...

CGA-2265-GWRR-WQJM

Bulletin has no description...

EUVD-2008-2263

Malware in sbrugna...

CVE-2025-2265

The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte...

CVE-2025-2265

The CVE-2025-2265 entry concerns Santesoft Sante PACS Server (Sante PACS Server.exe) where a web user’s password is processed as a 0x2000-byte zero-padded value that is SHA-1 hashed, base64-encoded, and stored in the HTTP.db’s USER table. The reported issue is that the number of hash bytes encode...

CVE-2025-2265 Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation

The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte...

CVE-2024-2265

A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The explo...

CVE-2024-2265 keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code

A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The explo...

CVE-2024-2265 keerti1924 PHP-MYSQL-User-Login-System login.sql inclusion of sensitive information in source code

A vulnerability, which was classified as problematic, was found in keerti1924 PHP-MYSQL-User-Login-System 1.0. This affects an unknown part of the file login.sql. The manipulation leads to inclusion of sensitive information in source code. It is possible to initiate the attack remotely. The explo...

CVE-2024-2265

CVE-2024-2265 affects the keerti1924 PHP-MYSQL-User-Login-System 1.0. The issue is in an unknown part of login.sql and results in inclusion of sensitive information in the source code, exposing confidential data. Attacks are described as remote, with the exploit publicly disclosed. Multiple conne...

CVE-2023-2265

creationtimestamp| type| source ---|---|--- 2023-12-21 10:37:45+00:00| seen| https://t.me/ctinow/157578...

Schweitzer Engineering Laboratories SEL-411L

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schweitzer Engineering Laboratories Equipment : SEL-411L Vulnerability : Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION Successful exploitation of this vulnerability...