833 matches found
CVE-2026-22777
CVE-2026-22777 concerns ComfyUI-Manager, an extension for ComfyUI. A CRLF injection vulnerability exists in the configuration handling where an attacker can inject special characters into HTTP query parameters to add arbitrary values to the config.ini, potentially tampering with security settings...
CVE-2026-22777 ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or...
CVE-2020-7617
ini-parser through 0.0.2 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of Object.prototype using a 'proto' payload...
CVE-2023-53944
EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read syst...
EUVD-2025-202846
Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled valuelen...
📄 Casdoor 2.95.0 Directory Traversal
Casdoor version 2.95.0 directory traversal proof of concept exploit. ============================================================================================================================================= | Title : Casdoor 2.95.0 Directory Traversal | | Author : indoushka | | Tested on :...
CVE-2022-4983
TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling INI-file based that can be abused to cause remote creation of files on the host filesystem. Depending on where files can be created and which filenames are allowed, this can allow...
Malicious code in ini-barnard-juno-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3dbf5daee4a63bb5da7d2edd25d7ce8d9d7bc3d058330917f28aa7374a6ef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yonder-less-loader-ini-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d24be310a09fbc0c9ea69c806f48c32bc74d179f2b3b70aedfed17bb573b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175439
Malicious code in yonder-less-loader-ini-auth npm...
EUVD-2025-177140
Malicious code in planetology-deneb-betelgeuse-ini npm...
EUVD-2025-176707
Malicious code in release-it-perseus-ini-node-config npm...
EUVD-2025-178553
Malicious code in helmet-sirius-ini-mocha npm...
EUVD-2025-178412
Malicious code in ini-barnard-juno-shelljs npm...
EUVD-2025-178411
Malicious code in ini-koa-adonis-astrometry npm...
EUVD-2025-178409
Malicious code in ini-quito-stratosphere-slides npm...
EUVD-2025-179483
Malicious code in cryovolcano-grus-ini-proxima npm...
EUVD-2025-180384
Malicious code in apollo-ini-grunt-radiant npm...