CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2024-39719

Анализ уязвимости раскрытия существования файлов в Ollama CVE-2024-39719 中文 Обзор уязвимости CVE-2024-39719 — это уязвимость раскрытия информации о существовании файлов, затрагивающая Ollama версии 0.3.14 и более ранние. Эта уязвимость позволяет злоумышленникам определять наличие конкретных файло...

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability एक्सप्लॉइट लेखक: ersinerenler विक्रेता होमपेज https://code-projects.org/blood-bank-in-php-with-source-code सॉफ़्टवेयर लिंक https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

CVE-2023-3897

CVE-2023-3897 Eine Benutzernamen-Enumeration ist durch Umgehung des CAPTCHA in der On-Premise SureMDM-Lösung auf Windows-Bereitstellung möglich. Der Angreifer kann lokale Benutzerinformationen über Fehlermeldungen enumerieren. Dieses Problem betrifft SureMDM On-Premise: Version 6.31 und niedriger...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Vulnerabilità DoS di soppressione RADIUS in Cisco ISE 🌐 ⚠️ Panoramica 🚨 Vulnerabilità di denial-of-service DoS ad alta gravità in Cisco Identity Services Engine ISE! 💥 Un attaccante remoto non autenticato può bloccare il dispositivo con pacchetti RADIUS appositamente predisposti...

Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

Microfinance Management System V1.0 Vulnerabilità di SQL Injection Non autenticato 1. Descrizione: Microfinance Management System consente SQL Injection tramite il parametro 'customernumber' in /mims/updatecustomer.php. Sfruttando questo problema, un attaccante potrebbe compromettere...

CVE-2025-24963

CVE-2025-24963 - Режим браузера Vitest - Чтение локального файла CVE-2025-24963 — это уязвимость средней степени серьезности оценка CVSS 3.1: 5.9, затрагивающая пакет @vitest/browser, компонент фреймворка тестирования Vitest на основе Vite. Эта уязвимость возникает из-за неправильной проверки...

pritunl-CVE-2020-25200

CVE-2020-25200 Server Pritunl VPN - Versione interessata: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25 consente agli aggressori di enumerare i nomi utente VPN validi tramite una serie di tentativi di login su /auth/session. Inizialmente, il server restituirà l'error...

CVE-2025-32429-Checker

Verificador de Vulnerabilidade CVE-2025-32429 Um scanner de vulnerabilidades baseado em Python para detectar a vulnerabilidade de injeção SQL CVE-2025-32429 em plataformas XWiki. Funcionalidades Escaneamento de Alvo Único : Verificar alvos individuais com a opção -t Escaneamento em Lote : Escanea...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）DoS Dieser Fehler nutzt einen Speicherfehler aus, wenn in einer einzigen Verbindung zu viele \r\n gesendet werden. Beispiel $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1...

ThreatIngestor

Utility ThreatIngestor Script per migliorare l'uso di ThreatIngestor e aiutare a minimizzare gli errori. Tutti gli script contengono il seguente argomento opzionale per permettere una maggiore verbosità su stdout: root@kitploit: python3 scripts/ -v Un elenco rapido di tutti gli script disponibili...

CVE-2021-40353

CVE-2021-40353 CVE-2021-40353 Vulnérabilité d'injection SQL dans openSIS 8.0 https://vulners.com/cve/CVE-2021-40353 Une vulnérabilité d'injection SQL existe dans la version 8.0 d'openSIS lorsque MySQL ou MariaDB est utilisé comme base de données de l'application. Un attaquant peut alors émettre l...

SQLiDetector

SQLiDetector Einfaches Python-Skript, unterstützt mit einem BurpBouty-Profil, das hilft, SQL-Injection Error Based zu erkennen, indem mehrere Anfragen mit 14 Payloads gesendet und nach 152 Regex-Mustern für verschiedene Datenbanken gesucht wird. root@kitploit:...

CVE-2026-46369 Nimiq: Validity store off by one error

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...

CVE-2026-46369

Nimiq (Rust implementation of the Nimiq Proof-of-Stake protocol, Albatross consensus) is affected by an off-by-one error in its validity store through version 1.5.0 . The store uses a strict lower-bound comparison that expires a stored transaction one block too early relative to Transaction::is_v...

CVE-2026-46369 Nimiq: Validity store off by one error

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF 摘要 Trivision NC-227WF 固件 5.80（构建于 20141010）的登录机制根据用户名是否存在返回不同的错误消息（"Unknown user" vs "Wrong password"），从而允许攻击者枚举有效用户名。引用的 CVE 记录已发布到 CVE 列表/NVD。 影响 用户名枚举，支持针对性暴力破解或凭据填充攻击。 结合凭据窃取或弱密码，增加了未经授权访问的风险。 观察到的行为/示例 根据用户名有效性返回不同的错误消息。 观察到的响应示例： "Unknown user" — 用户名不存在。...

snuffleupagus

Snuffleupagus Modulo di sicurezza per php7 e php8 - Uccidere le classi di bug e applicare virtual-patching al resto!...

EUVD-2026-66678

In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

CVE-2023-4220-Exploit

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Эксплойт Эксплойт для CVE-2023-4220 использует ошибку программирования в LMS Chamilo, которая позволяет загрузить файл на сервер без каких-либо ограничений. Этот эксплойт был написан для нашей машины Easy permX с HTB, с любовью для CTF-игрок...