114767 matches found
CVE-2026-103510 Authentication bypass via blank auth token in P4Search
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2026-103510 Authentication bypass via blank auth token in P4Search
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
EUVD-2026-92291
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...
CVE-2023-36085_SISQUALWFM-Host-Header-Injection
CVE-2023-36085 SISQUALWFM 主机头注入漏洞 本仓库包含在 SISQUALWFM 7.1.319.103 版本中发现的主机头注入漏洞的相关信息，该漏洞允许攻击者操纵网页链接或将用户重定向到恶意站点。此漏洞已被分配编号 CVE-2023-36085，并已在 7.1.319.111 及更高版本中修复。 漏洞详情 漏洞利用标题： SISQUALWFM 7.1.319.103 主机头注入 发现日期： 17/03/2023 报告日期： 17/03/2023 解决日期： 13/10/2023 漏洞利用作者： Omer Shaik unknownexploit 厂商主页：...
evilnotify
EvilNotify Una aplicación iOS realmente simple que hace cosas con CVE-2025-24091; No es realmente algo útil, solo por diversión Instalación 1. Obtén la última versión .ipa desde la pestaña Releases 2. Instálala mediante LiveContainer o algún servicio de sideloading Uso Añade claves personalizadas...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses httpclient5-5.6.3.jar and is vulnerable to CVE-2026-71290
Summary IBM Maximo Manage application in IBM Maximo Application Suite uses httpclient5-5.6.3.jar and is vulnerable to CVE-2026-71290. This bulletin contains information regarding how to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-71290 DESCRIPTION: Improper TLS hostname...
CVE-2014-8609-exploit
CVE-2014-8609-exploit Durante el estudio de la explotación de pending intent, creé mi aplicación PoC de CVE-2014-8609 Referencia: 1. https://seclists.org/fulldisclosure/2014/Nov/81 2. https://github.com/locisvv/Vulnerable-CVE-2014-8609...
CVE-2022-3689
CVE-2022-3689 分析报告 概述 CVE-2022-3689是WordPress特定插件中发现的一个SQL注入漏洞，攻击者可以利用Web应用程序的安全漏洞向数据库注入恶意的SQL代码。这可能导致数据泄露、数据篡改等严重安全问题。 参考资料 Igloo Corporation 安全报告...
JustALampNothingElse
完整的漏洞分析和应用描述可在此处查看： https://drive.google.com/file/d/14s5rYThOpEbU6KjBNT2D2l65WDcwCDTL/view?usp=drivelink 该项目由 SocialTIC 和 ITESO 共同制作 Cris...
CVE-2024-9326-PoC
CVE-2024-9326 PoC漏洞利用脚本 该PoC脚本旨在验证CVE-2024-9326的存在，这是PHPGurukul Online Shopping Portal v2.0中的一个高危SQL注入漏洞。它自动化了利用过程，以确定目标Web应用程序是否存在漏洞，使安全专业人员能够评估并确认该缺陷的存在。...
webapp-exploits
webapp-exploits Desarrollo de exploits para aplicaciones web...
CVE-2026-105392: Use of Hard-coded Cryptographic Key
A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...
PT-2026-106239
Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...
PT-2026-104758
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
PT-2026-104752
Name of the Vulnerable Software and Affected Versions Perforce P4 Search versions prior to 2026.4.2 Description Container images reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can use this to obtain the highest...
PT-2026-106204
Name of the Vulnerable Software and Affected Versions Lybbn Django-Vue-Lyadmin versions prior to 3.2.13 Description An issue exists in the JWT Signing component within the file backend/application/settings.py. The manipulation of the SECRET KEY argument allows the use of a hard-coded cryptographi...
PT-2026-106051
FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData that allows authenticated attackers to trigger unserialize on raw POST data without an allowed classes filter for multiple-select fields. Attackers can submit a serialized XLSXWrite...
CVE-2022-42889
CVE-2022-42889 测试应用程序 该存储库包含一个使用 Apache Commons Text 1.9 的简单应用程序，该版本易受 CVE-2022-42889 影响。 复现该漏洞的步骤。 在代码仓库中复现该漏洞的步骤。 将 DemoApplication.java 复制到你的仓库。 使用默认字符串运行 main 方法（建议）。 如果你对默认字符串的输出是 519，或者你的应用程序运行时没有出现任何错误： 那么该应用程序是可利用的。🥵 在虚拟机中运行该应用程序 克隆仓库 构建项目 mvn assembly:assembly...
CVE-2022-31897
CVE-2022-31897 日期：06/22/2022 漏洞作者：Angelo Pio Amirante 厂商主页：https://www.sourcecodester.com/ 软件链接：https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html 版本：1.0 测试环境：服务器：Windows 10 上的 XAMPP CVE编号：CVE-2022-31897 描述： Zoo Management System 1.0...