83898 matches found
vulnbox-easy-CVE-2025-29927
Man-in-the-middle Questa applicazione si chiama Man-in-the-middle perché contiene una vulnerabilità nel middleware di Next.JS e la flag si trova nella chiamata API. 🚀 Configurazione di produzione 1. .env.production DATABASEURL=postgresql://postgres:password@db:5432/nextauth...
PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters
Summary PyMongo percent-decoded the entire host section of a connection string before splitting it into individual host:port entries. A percent-encoded , or : in a hostname therefore decoded into a real delimiter, injecting an additional attacker-chosen host and port into the client's seed list...
GHSA-VP6J-J7W5-5XJJ PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters
Summary PyMongo percent-decoded the entire host section of a connection string before splitting it into individual host:port entries. A percent-encoded , or : in a hostname therefore decoded into a real delimiter, injecting an additional attacker-chosen host and port into the client's seed list...
CVE-2024-6678
CVE-2024-6678 - GitLab: Pipeline Schedule Arbitrary User Trigger PoC per CVE-2024-6678 Descrizione della vulnerabilità GitLab consente agli utenti di eseguire manualmente le pianificazioni dei pipeline CI/CD Pipeline Schedules tramite il pulsante «Play». La vulnerabilità consiste nel fatto che la...
CVE-2026-27944
CVE-2026-27944 - Download e decifratura non autenticata del backup di Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red Un proof-of-concept PoC per CVE-2026-27944, una vulnerabilità critica in Ngi...
NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
NPM: vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary vulnerability discovered by ? in WordPress Npm vm2 versions = 3.12.1...
EUVD-2026-72672
Snowflake drivers writes sensitive information to logs...
EUVD-2026-81596
vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool...
DEBIAN-CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
PYSEC-2026-4189
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...
CVE-2026-105742
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2025-9074
CVE-2025-9074 – Docker Desktop Windows Container→Host-Schreiben über exponierte Engine-API Autor: w01f Status: Proof-of-Concept nur für Bildungszwecke / autorisierte Tests Überblick Dieses Projekt demonstriert einen PoC für CVE-2025-9074 , eine Fehlkonfiguration/Exposition in bestimmten Versionen...
EUVD-2026-92818
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret whose ID is interpreted as a client-side pathname, or consume a local OCI image layout outside the project after...
CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...
CVE-2026-105742
The docling library (versions 2.95.0 through 2.132.0 ) contains a vulnerability in the HTML image resource loader located at docling/backend/utils/image_resource_loader.py. When enable_remote_fetch=True and fetch_images=True are set, the loader forwards custom headers—such as API keys and cookies...
CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...
CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document
Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...
CVE-2026-105696
The Penpot design and prototyping platform is vulnerable to a page-scope escalation in versions prior to 2.18.0 . The get-page and get-file-fragment RPC commands fail to verify if a requested page-id or fragment belongs to the authorized set of a provided share-link permission object. An authenti...
CVE-2023-49981
CVE-2023-49981 School Fees Management System v1.0 - Controllo degli accessi errato - Elenco delle directory Descrizione : Una vulnerabilità di elenco delle directory in School Fees Management System v1.0 consente agli attaccanti di elencare directory e file sensibili all'interno dell'applicazione...