597 matches found
5MMISSI-CVE-2017-1000499
5MMISSI-CVE-2017-1000499 CVE-2017-1000499의 PoC phpMyAdmin 4.7.x 버전4.7.6.1/4.7.7 이전은 CSRF 취약점에 노출되어 있습니다. 사용자를 속여 조작된 URL을 클릭하게 함으로써 레코드 삭제, 테이블 드롭/트렁케이트 등과 같은 유해한 데이터베이스 작업을 수행할 수 있습니다. 내용 Makefile web/index.html 지침 사전 준비 git clone https://github.com/Villaquiranm/5MMISSI-CVE-2017-1000499.git cd...
PoC-CVE-2024-44349
PoC-CVE-2024-44349 취약점이 발견되어 Anteeo WMS - v4.7.31 에서 테스트되었습니다. 이 취약점은 공격자가 username 파라미터 내에 SQL 명령을 조작하여 기본 데이터베이스의 데이터를 유출할 수 있게 합니다. 영향을 받는 ANTEEO B2B WMS 버전은 v.4.7.x부터 v.4.7.34 미만입니다. 사용법 1. git clone [email protected]:AndreaF17/PoC-CVE-2024-44349.git 2. cd PoC-CVE-2024-44349 3. python3 -...
DEBIAN-CVE-2026-93485
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Automattic WordPress core allows DOM-Based XSS. This issue affects WordPress versions 7.1 before 7.1.1; 7.0 through 7.0.4; 6.9 through 6.9.7; 6.8 through 6.8.8; 6.7 through 6.7.7; 6.6 through 6.6.7...
CVE-2026-93485 WordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Automattic WordPress core allows DOM-Based XSS. This issue affects WordPress versions 7.1 before 7.1.1; 7.0 through 7.0.4; 6.9 through 6.9.7; 6.8 through 6.8.8; 6.7 through 6.7.7; 6.6 through 6.6.7...
CVE-2026-70794
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
CVE-2026-62575
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
EUVD-2026-62048
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
EUVD-2026-61745
Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...
EUVD-2026-61558
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Installation and Configuration. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...
PT-2026-78092
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security issue in the Security component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Successf...
July 14, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 (KB5100991)
None None...
July 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5102205)
None None...
July 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5102204)
None None...
CVE-2026-11450
A vulnerability was detected in GL.iNet GL-MT3000 4.4.5. This affects the function dlopen in the library /usr/lib/oui-httpd/rpc/ of the component Path Normalization Handler. Performing a manipulation of the argument devname results in command injection. It is possible to initiate the attack...
CVE-2026-11448 GL.iNet GL-MT3000 Minidlna Service rpc realpath command injection
A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function realpath of the file /rpc of the component Minidlna Service. This manipulation of the argument kube. set causes command injection. The attack is possible to be carried out remotely. Upgrading to...
CVE-2026-11447 GL.iNet GL-MT3000 MTK Backend iwinfo.so iwinfo_backend command injection
A security flaw has been discovered in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function iwinfobackend of the file iwinfo.so of the component MTK Backend. The manipulation of the argument device results in command injection. The attack can be executed remotely. The exploit has been released...
2026-05 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5088860)
2026-05 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 KB5088860...
May 12, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 (KB5087063)
None None...