452404 matches found
CVE-2026-34220
CVE-2026-43220 Injection SQL dans MikroORM ★ PoC d'injection SQL CVE-2026-43220 dans MikroORM ★ https://github.com/user-attachments/assets/33724cfc-6151-47ff-9415-2f50c5124cd1 Aperçu CVE-2026-43220 est une vulnérabilité d'injection SQL dans MikroORM , un framework ORM TypeScript/Node.js largement...
EUVD-2026-94284
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...
CVE-2026-92532 Unrestricted Upload of File with Dangerous Type in BugTracker.NET
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...
CVE-2026-92532 Unrestricted Upload of File with Dangerous Type in BugTracker.NET
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...
EUVD-2026-94283
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...
CVE-2026-92531 Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...
CVE-2026-92531
BugTracker.NET contains an operating system command injection vulnerability in its SVN integration component . The application fails to properly validate the repository field value before incorporating it into an svn.exe command. An authenticated user with administrator privileges can store manip...
Exploit for CVE-2026-13043
🕷️ CVE-2026-13043 - Panda / WatchGuard Kernel Memory Access...
EUVD-2026-94282
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...
CVE-2026-103668
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...
CVE-2026-96408
A code injection vulnerability exists in the upgrade script of Movable Type . This flaw could enable an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product. No specific exploit information or remediation versions are provided in the documents.
CVE-2026-96408
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...
CVE-2026-96408
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...
CVE-2026-97146
Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the...
USN-8893-1: Libwebsockets vulnerabilities
It was discovered that libwebsockets did not properly validate user-supplied data when parsing HTTP/2 HPACK path headers, which could result in a write past the end of an allocated buffer. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-19773 It was discovered that...
CVE-2023-47268
PrusaSlicer Arbitrary Code Execution تصعيد صلاحيات باستخدام ملف .3mf مع إصدار prusaslicer ضعيف. تأكد من أنك تستطيع تشغيل prusaslicer باستخدام sudo. Linux 1.قم بتنزيل الملفات 2.غيّر IP وPORT في exploit.sh 3.تأكد من وجود exploit.sh في دليل /tmp 4.نفّذ الأمر التالي sudo ./prusaslicer -s evil.3mf...
ghostlock-sabrina
GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...
SmartAsset-CORS-CVE-2020-26527
SmartAsset-CORS-CVE-2020-26527 CVE-2020-26527 Smart Asset - الإصدار 2020.7 تم اكتشاف مشكلة في API/api/Version في Damstra Smart Asset 2020.7. مشاركة الموارد عبر الأصول CORS تثق بأصول عشوائية بقبول رأس الطلب التعسفي 'Origin: example.com' والاستجابة بـ 200 OK ورأس حرف بدل 'Access-Control-Allow-Origi...