476 matches found
CVE-2020-7471
CVE-2020-7471 يوفر هذا المستودع البيئة ونموذج الإثبات POC لثغرة CVE-2020-7471: حقن SQL عبر StringAggdelimiter إصدارات Django المتأثرة 1.11 إلى 1.11.28 باستثناء 1.11.28 2.2 إلى 2.2.10 باستثناء 2.2.10 3.0 إلى 3.0.3 باستثناء 3.0.3 الخطوات المطلوبة قبل التنزيل والاستخدام: 1. تثبيت إصدار Django المعرض...
CVE-2020-7471
CVE-2020-7471 يوفر هذا المستودع بيئة وPOC لثغرة CVE-2020-7471: حقن SQL محتمل عبر StringAggdelimiter إصدارات django المتأثرة 1.11 إلى 1.11.28 باستثناء 2.2 إلى 2.2.10 باستثناء 3.0 إلى 3.0.3 باستثناء يلزم القيام بالخطوات التالية قبل التنزيل والاستخدام: 1. تثبيت إصدار django الثغرة، الإصدار الذي...
CVE-2020-7471-Django
CVE-2020-7471-PoC Django PoC لثغرة حقن SQL في PostgreSQL مع Django، الموجودة في Django 1.11 قبل 1.11.28، و2.2 قبل 2.2.10، و3.0 قبل 3.0.3 الفئة django.contrib.postgres.aggregates.StringAgg المستخدمة لدالة PostgreSQL STRINGAGG كانت تحتوي على ثغرة حقن SQL. وكان من الممكن تضمين استعلام عشوائي في القي...
cve-collector
CVE-Collector Simple Latest CVE Collector Written in Python There are various methods for collecting the latest CVE Common Vulnerabilities and Exposures information. This code was created to provide guidance on how to collect, what information to include, and how to code when creating a CVE...
CVE-2025-46819
CVE-2025-46819 – Lecture hors limites du délimiteur de chaîne longue Lua dans Redis Un délimiteur de chaîne longue malformé provoquant une lecture hors limites du lexer Lua sur Redis 8.2.1. Vue d'ensemble L'analyseur de chaînes longues Lua dans Redis 8.2.1 gère mal les séquences =... malformées,...
DjVul_StringAgg
Django CVE-2020-7471 SQLi CVE-2020-7471: إمكانية حقن SQL عبر StringAggdelimiter كانت دالة التجميع django.contrib.postgres.aggregates.StringAgg عرضة لحقن SQL، وذلك باستخدام محدد مُصمَّم بعناية. التشغيل python manage.py makemigrations python manage.py migrate python manage.py runserver المراجع...
CVE-2020-7471
CVE-2020-7471 حقن SQL عبر إدخال محدد StringAgg الإعداد: شغّل ./setup.sh للإعداد الأولي افتح صورة docker لبدء قاعدة البيانات: docker exec -it containerid /bin/bash ثم شغّل الأوامر التالية: python manage.py makemigrations vulapp python manage.py migrate ابدأ المثيلات باستخدام: docker-compose up الآ...
Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled Java or PHP source outside a generated documentation comment. The affected sanitizers remove comment terminators rather than neutralizing them, allowing a terminator to reform from...
GHSA-RM89-RHWJ-9J92 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled Java or PHP source outside a generated documentation comment. The affected sanitizers remove comment terminators rather than neutralizing them, allowing a terminator to reform from...
CVE-2026-105796 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...
CVE-2026-105796
The Kiota OpenAPI-based HTTP Client code generator is vulnerable to code injection in versions 0.5.0 through 1.35.0 for both Java and PHP generators. The root cause is a flaw in the documentation-comment sanitizers that delete block-comment terminators instead of neutralizing them. This allows ov...
CVE-2026-59787
A flaw was found in Zabbix. The Perl Simple Network Management Protocol SNMP trap receiver script does not properly sanitize the record delimiter within incoming trap content. An attacker capable of sending SNMP traps can exploit this vulnerability to inject forged trap records targeting other...
Astra Linux – Vulnerability in golang-github-golang-jwt-jwt
golang-jwt is a Go implementation of JSON Web Tokens. Starting from version 3.2.0 and before versions 5.2.2 and 4.5.2, the parse.ParseUnverified function splits its argument which is untrusted data using periods. As a result, in the case of a malicious request where the Authorization header...
DEBIAN-CVE-2026-59787
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity...
CVE-2026-59787: Improper Neutralization of Record Delimiters
The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity...
CVE-2026-3854-PoC
CVE-2026-3854 PoC — ثغرة RCE في GitHub عبر حقن خيار الدفع X-Stat لأغراض تعليمية وأبحاث أمنية مرخصة فقط. لا تستخدم ضد أي نظام دون إذن كتابي صريح. نظرة عامة CVE-2026-3854 هي ثغرة تنفيذ تعليمات برمجية عن بُعد في خط أنابيب الدفع git في GitHub Enterprise Server و GitHub.com. عندما يقدم عميل خيارات الد...
CVE-2026-103505
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities
Summary IBM Maximo Manage application in IBM Maximo Application Suite uses uses httpcore5-h2-5.2.4.jar, browserslist-4.23.0.tgz, baseline-browser-mapping-2.10.13.tgz, fast-uri-3.1.5.tgz and fast-uri-3.1.6.tgz and is vulnerable to CVE-2026-54428, CVE-2026-54399, CVE-2026-73088, CVE-2026-45819,...
PT-2026-103904
Name of the Vulnerable Software and Affected Versions AWS EFS CSI Driver aws-efs-csi-driver versions 3.1.0 through 3.4.2 Description Improper neutralization of argument delimiters in the volume handling component allows remote authenticated users with PersistentVolume creation permissions to inje...
