555 matches found
CVE-2021-21017
CVE-2021-21017 Ещё один баг с порядком байтов в Adobe Reader : root@kitploit: Плагин IA32, вер. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl !=...
CVE-2026-31891
MongoLite 집계 최적화 프로그램의 toJsonExtractRaw를 통한 SQL 인젝션 취약점 클래스 : SQL 인젝션 CWE-89 제품 : Cockpit CMS Core Edition 영향을 받는 버전 : 2.13.4 및 집계 최적화 프로그램이 도입된 이후의 모든 버전으로 추정 테스트된 Docker 이미지 : cockpithq/cockpit:core-2.13.4 소스 커밋 : 7fe563023b7fae854c857d2e2dc0878ef28fbb5f 태그 2.13.4 GitHub :...
CVE-2026-48710
CVE-2026-48710 Principe : Starlette est un framework ASGI Python open source et léger. Cela provient du fait que le framework Starlette, dans le traitement de la structure de données url, fait confiance au host envoyé par le client et le concatène directement dans la variable url pour le traiteme...
CVE-2026-1207
CVE-2026-1207 Django GIS RasterField SQL-инъекция — воспроизведение уязвимости Обзор уязвимости Тип уязвимости : SQL-инъекция SQL Injection Затронутый компонент : django.contrib.gis RasterField При использовании RasterField Django GIS для выполнения запросов параметр band напрямую подставляется в...
CVE-2020-12112
CVE-2020-12112 🚨 Les versions de BigBlueButton antérieures à 2.2.4 présentent une vulnérabilité LFI permettant d'accéder à des fichiers sensibles. Histoire 📜 Lors d'un cours à distance sur une instance BigBlueButton, un étudiant de ma classe a partagé le lien de présentation des diapositives de m...
CVE-2025-63572
Описание Уязвимость SQL-инъекции была обнаружена в конечной точке, отвечающей за поиск клиентов платформы Zentrajuris v.1.0. Пользовательский ввод, отправленный в параметр поиска, конкатенируется непосредственно в SQL-запрос без надлежащей санитизации/параметризации, что позволяет атакующему...
CVE-2026-46591
camel-neo4j Reproduceteur d'injection Cypher CVE-2026-46591 Ce projet démontre une injection Cypher dans le composant camel-neo4j d'Apache Camel, suivie sous la référence CVE-2026-46591. Le producteur construit la clause WHERE Cypher pour ses opérations de récupération/suppression à partir de la...
CVE-2021-21017
CVE-2021-21017 またしてもAdobe Readerのバイトオーダーマークの問題 : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 &&...
XSS-Bypass-Filters
XSS-Bypass-Filters Redirection root@kitploit: document.location= document'location'= window.location= this"window""location"= document.location.href= location.href= location= window.location.assign window'location''href'= document.location.replace window.open"link", "blank"; Lien root@kitploit:...
EUVD-2026-66816
The front-end interface /superdiamond/preview/projectCode/module/type of super-diamond-server = 1.3.3 is vulnerable to SQL injection. The module parameter is directly concatenated into the SQL IN clause through StringUtils.split and string concatenation without being parameterized and bound...
net-creds
Тщательно перехватывает пароли и хеши из интерфейса или pcap-файла. Объединяет фрагментированные пакеты и не полагается на порты для идентификации сервисов. Скриншоты --- Перехватываемые данные Посещённые URL...
subgen
Subgen – ein Subdomain-Kombinationswerkzeug mit etwas Intelligenz Wenn du zu der Erkenntnis gelangt bist, dass du deine DNS-Enumeration-Methodik aufteilen möchtest, indem du Kombinationen generierst und/oder passive Daten aus anderen Quellen abrufst, dann ist subgen wahrscheinlich der Sortierer &...
CVE-2022-37204
CVE-2022-37204 CVE-2022-37204 POC Vorgeschlagene Beschreibung RESERVED JFinal CMS 5.1.0 ist anfällig für SQL-Injection. Zusätzliche Informationen https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Schwachstellentyp SQL-Injection Anbieter des Produkts die...
CVE-2022-37205
CVE-2022-37205 CVE-2022-37205 POC Descrição sugerida RESERVED O JFinal CMS 5.1.0 é afetado por: Injeção SQL. Essas interfaces não usam o mesmo componente, nem possuem filtros, mas cada uma usa seu próprio método de concatenação SQL, resultando em injeção SQL. Informações adicionais...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
CVE-2022-37202
CVE-2022-37202 CVE-2022-37202 POC Descrizione suggerita JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Tipo di vulnerabilità SQL Injection Fornitore del prodotto il gruppo di sviluppo Codice base del prodotto affetto https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Componente affetto...