109 matches found
CVE-2023-4357-Chrome-XXE
工具简介 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP，实现对访客者本地文件窃取。 The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors. 文件名| 说明| 利用场景| 为何能单文件/单payload实现漏洞利用？ ---|---|---|--- d.svg| 单文件利用，无需依赖其他文件| 1...
CVE-2019-0678
Vulnerabilidad Vulnerabilidad de elevación de privilegios en Microsoft Edge Descripción de la vulnerabilidad Esta vulnerabilidad permite a un atacante ejecutar código JavaScript en cualquier host sin permiso, también puede robar archivos locales del sistema y esto además resulta en el cambio de...
CVE-2022-3656
Imperva Red Team reveló recientemente una vulnerabilidad llamada CVE-2022-3656 que afecta a más de 2.5 mil millones de usuarios de Google Chrome y navegadores basados en Chromium. Esta vulnerabilidad permite el robo de archivos sensibles, como wallets cifrados y credenciales de proveedores de nub...
PYSEC-2026-1318 DSPy does not properly restrict file reads
The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...
MAL-2026-6275 Malicious code in @ts-apis/ts-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccf08a9ba188be941f42f0b088d51fc5b1e84802fe9bd1d1218a6b71a6e2c11 The published tarball's dist/index.js contains an obfuscated payload that runs at require time inside a setTimeout-wrapped IIFE, completely unrelated...
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVR...
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVR...
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVR...
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVR...
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVR...
CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send specially crafted requests to steal files from the web server. The affected products and versions are as follows: FAST/TOOLS Packages: RVSVR...
PT-2026-7056
Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04 Description The software does not properly validate URLs, potentially allowing an attacker to steal files from the web server by sending specially crafted requests. Recommendations Update to a version...
📄 Novell GroupWise 8.0 Traversal / Code Injection
Proof of concept exploit for an older vulnerability from 2012 that looks for a directory traversal vulnerability in Novell GroupWise version 8.0 before Support Pack 3 and attempts to upload a webshell if possible...
Mustangproject 代码问题漏洞
Mustangproject is an invoice library, validator, and tooling software open-sourced by the ZUGFeRD Community. A code issue vulnerability exists in Mustangproject versions prior to 2.16.3 that stems from allowing file theft via XXE attacks...
EUVD-2020-7636
Malware in sbrugna...
EUVD-2002-0587
Malware in sbrugna...
EUVD-2000-0898
Malware in sbrugna...
EUVD-2023-48483
Malicious code in bioql PyPI...