1308729 matches found
cve-2014-0130
== CVE-2014-0130 Caso de Prueba Payload : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Detectado por Netsparker : https://i.imgur.com/s1vahmj.png == HackerOne 1 - Vulnerabilidad de directory traversal en Rails de newrelic.com por droidsec - https://hackerone.com/reports/134032 ==...
CVE-2026-58744
In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58724
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-57035
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56964
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56888
In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-55359
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0171
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-5638-Apache-Struts2
CVE-2017-5638 Apache Struts2 CVE-2017-5638 的 PoC 利用 PHP 代码示例 用法 php exploit.php "http://127.0.0.1:8080/example/index.action" "command" 使用风险自负...
CVE-2024-4577
此存储库没有 README。...
CVE-2024-21413
此存储库没有 README。...
drupalgeddon2-cli
drupalgeddon2-cli 一个命令行版本的 Drupalgeddon2 CVE-2018-7600 概念验证工具,作为学习练习在完成 Hack The Box Academy Attacking Common Applications 模块时编写。 !WARNING 仅限授权的安全测试和教育用途。 在非您拥有的或未经明确书面许可的系统上运行此工具,在大多数司法管辖区属于违法行为。请参阅 法律与负责任使用。 !NOTE 实现借助 AI 辅助编写。 请参阅 关于作者身份的说明。 背景——我为何构建此工具 Drupal 是 HTB Academy 的 Attacking Common...
CVE-2023-20198
此存储库没有 README。...
sleepall
sleepall Trojan based on the CVE-2024-28085 vulnerability https://people.rit.edu/sjf5462/6831711781/wall2272024.txt which is still unpatched anywhere. Essence: bash supports escape codes and we can control the appearance of the line in the terminal. The trojan listens to processes and looks for t...
CVE-2019-0708
Este repositorio no tiene un README...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by an HTTP request smuggling vulnerability (CVE-2026-11710)
Summary IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by an HTTP request smuggling vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products and...
CVE-2021-40444-Microsoft-Office-Word-Remote-Code-Execution-
CVE-2021-40444-Microsoft-Office-Word-远程代码执行-...
CVE-2023-4220
此存储库没有 README。...