2742 matches found
CVE-2026-42588
CVE-2026-42588 - Удаленное выполнение кода через Jolokia в Apache ActiveMQ Уровень серьезности : 🔴 Высокий CVSS 4.0: 8.1 Тип уязвимости : CWE-94 — Инъекция кода Затронутые версии : Apache ActiveMQ Необходимые условия : Требуются учетные данные Web Console по умолчанию admin:admin 📋 Содержание Обз...
EUVD-2026-76873
vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...
CVE-2019-12840
CVE-2019-12840 Аутентифицированное RCE в Webmin 1.910 - 'Обновления пакетов' Использование : 1- настройте netcat слушатель. 2- python3 exploit.py Примечания: Укажите URL, например: http://:port Пожалуйста, скопируйте cookie 'sid' из вашего браузера и предоставьте его для работы эксплойта...
Apache Druid - Server-Side Request Forgery
Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid.This issue affects all previous Druid versions.When using the Druid management proxy, a request tha...
SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE
SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...
SillyTavern - Server-Side Request Forgery
SillyTavern versions up to and including 1.17.0 expose the /api/search/searxng endpoint, which accepts an attacker-controlled baseUrl parameter and uses it directly to build outbound server-side fetch requests. An authenticated low-privilege user can point baseUrl at an internal or loopback HTTP...
Chef Automate < 4.13.295 — SQL Injection
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...
Wipro Holmes Orchestrator 20.4.1 - Information Disclosure
Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...
CVE-2019-11447
CVE-2019-11447 - PoC 아바타 이미지 업로드 시 사용되는 취약한 파일 업로드 검사를 통해 CuteNews 2.1.2를 익스플로잇하여 RCE로 이어집니다. 설치 리포지토리를 클론하고 요구 사항을 설치합니다. pip install -r requirements.txt 사용법 아바타를 업로드하려면 CuteNews 사용자 계정이 필요하며, 관리자 계정일 필요는 없습니다. CVE-2019-11447.py URL USERNAME PASSWORD 예시: CVE-2019-11447.py...
CVE-2023-40028
CVE-2023-40028 PoC 익스플로잇 Ghost CMS의 심링크 업로드 취약점으로 인한 임의 파일 읽기 PoC 이미지 취약점 상세 CVE-2023-40028 은 Ghost CMS 5.59.1 이전 버전의 취약점으로, 인증된 사용자가 심볼릭 링크심링크를 업로드하여 호스트 시스템의 임의 파일을 읽을 수 있게 됩니다. 이 취약점은 Ghost CMS의 업로드 기능을 이용해 민감한 파일을 가리키는 심링크를 배치함으로써 악용될 수 있습니다. 심링크가 업로드되면 공격자는 서버에 조작된 HTTP 요청을 보내 대상 파일에 접근할 수...
CVE-2023-49974
CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page 설명 : Customer Support System 1.0은 저장형 XSS에 취약합니다. Customer Support System 버전 1에 XSS 취약점이 존재합니다. 악의적인 사용자가 고객을 편집/생성할 때 "contact" 필드/매개변수를 통해 JavaScript 코드를 삽입할 수...
analysis-and-poc-n8n-CVE-2025-68613
Обзор n8n и CVE-2025-68613 n8n — это платформа автоматизации рабочих процессов, используемая для интеграции систем и сервисов с помощью визуальных потоков и выражений JavaScript. CVE-2025-68613 — это критическая уязвимость удаленного выполнения кода RCE с CVSS 9.9 , затрагивающая несколько версий...
CVE-2026-86751
Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax in checkout acceptance notes that survive HTML escaping, are expanded ...
wordpress-skelersecurity-core-security-CVE-2026-63030
SkelerSecurity コアセキュリティプラグイン WordPress Core の REST Batch API エンドポイントへの未認証アクセスに対する、焦点を絞った一時的な緩和策です。 概要 SkelerSecurity Core Security Plugin は、WordPress が Core REST Batch API ルートへのリクエストを処理する前に認証を要求します： /wp-json/batch/v1 /?restroute=/batch/v1 これは、一般に wp2shell と呼ばれる WordPress REST Batch API...
Linux Distros Unpatched Vulnerability : CVE-2026-82059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal...
PT-2026-89173
Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...
CVE-2017-16524
CVE-2017-16524 발견자 Omar Mezrag - 0xFFFFFF 영향을 받는 제품 Samsung Network Video Recorders - Web Viewer 1.0.0.193 on Samsung SRN-1670D 제품 공급업체 Hanwha / Samsung Security - https://www.hanwhasecurity.com/ 취약점 유형 무제한 파일 업로드 취약점 공격 벡터 root@kitploit: AccessVector AV: Network User Interaction UI: None...
CVE-2020-7246
Настройка лаборатории: a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c Веб-сервер должен быть доступен по адресу http://127.0.0.1/index.php d Предварительно настроенная учетная...