483 matches found
CVE-2012-4792
CVE-2012-4792 CVE-2012-4792 सरल कैल्क शोषण...
CVE-2012-1876
CVE-2012-1876 CVE-2012-1876 सरल कैल्क शोषण...
manageengine-auditad-cve-2022-28219
मेरे CVE-2022-28219 विश्लेषण के समर्थन के लिए कोड। निष्पादित करने के लिए, Ruby और Rubygems स्थापित होने पर: root@kitploit: gem install httparty ruby ./manageengine-poc.rb यह एक अवधारणा प्रमाण के रूप में डिज़ाइन किया गया है, स्थिर शोषण नहीं। यह केवल calc चलाता है। :...
win-exec-calc-shellcode
win-exec-calc-shellcode شيل كود صغير خالٍ من NUL ينفّذ calc.exe. يعمل على إصدارات x86 وx64 من ويندوز 5.0-6.3 2000، XP، 2003، 2008، 7، 8، 8.1، مع جميع حزم الخدمات. الأحجام build 306...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mm/mglru: The issue of division by zero in vmpressurecalclevel has been fixed. evictfolios uses a second pass to reclaim folios that have undergone page writeback and become clean before the first pass is completed. This is becau...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then trying to perform a division operation. This could lead to a divide by 0 error. Example: echo 8:0...
Astra Linux – Vulnerability in OpenCV
A issue was discovered in OpenCV before versions 3.4.7 and 4.x before version 4.1.1. There is an out-of-bounds read/write operation in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to a denial of service...
CVE-2026-77992
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
EUVD-2026-64322
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
CVE-2026-77992
Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are affected by a heredoc terminator breakout in the calc element . The root cause is that the onUpdateComment endpoint did not perform any access checks, allowing unauthenticated network-based attacks with low complexity and no ...
CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...
CVE-2026-66915
Joomla Extension - fabrikar.com - Remote code execution in Fabrik 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajaxcalc feature of the calc plugin...
CVE-2026-66915
CVE-2026-66915 concerns Joomla extension Fabrik prior to version 4.6.7. An unauthenticated attacker can achieve remote code execution via the ajax_calc feature in the calc plugin. The provided documents do not include explicit exploitation status or a confirmed remediation step; no patch/version ...
EUVD-2026-55159
Joomla Extension - fabrikar.com - Remote code execution in Fabrik 4.6.7 - An unauthenticated attacker could execute arbitrary code by using the ajaxcalc feature of the calc plugin...
PT-2026-69425
Name of the Vulnerable Software and Affected Versions Fabrik versions prior to 4.6.9 Description An unauthenticated attacker can execute arbitrary code by leveraging the ajax calc feature within the calc plugin. Recommendations Update to version 4.6.9 or later. As a temporary workaround, restrict...
CVE-2026-71278
rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...
CVE-2026-71278
The rust-iot-platform contains an unauthenticated endpoint to create a calc rule (POST /calc-rule/create) where a user-supplied script field is stored and later evaluated with quick_js::Context::eval() without sandboxing. Because this route bypasses the AuthToken guard, an unauthenticated attacke...
CVE-2026-71278 rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluation
rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...
CVE-2026-71278
rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create api/src/controller/calcrulerouter.rs containing an arbitrary field. This route does not take the AuthToken request guard used elsewhere in the application, making it reachable without authentication...