961 matches found
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
pecli
PEcli Tool to analyze PE files in python 3. Current features : Show information about the file import, exports, resources Search for interesting information in the file abnormal resources, peid... Dump sections or resources Check size Search for a string in the file Installation You can install i...
Schneider Electric U.motion Builder - SQL Injection
The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...
CVE-2025-9215
إضافة StoreEngine القوية لتجارة إلكترونية ووردبريس للمدفوعات والعضويات والعمولات والمبيعات والمزيد = 1.4.0 - تنزيل ملفات تعسفي للمستخدمين الموثقين مشترك+ تحتوي إضافة StoreEngine على ثغرة في ميزة استيراد/تصدير CSV تسمح لأي مستخدم موثق مشترك، كاتب، محرر، إلخ بتنزيل ملفات تعسفية من الخادم، بما في ذل...
CVE-2022-0236
CVE-2022-0236 Плагин WordPress WP Import Export уязвим к несанкционированному раскрытию конфиденциальных данных из-за отсутствия проверки прав доступа в функции загрузки wpieprocessfiledownload, расположенной в файле /includes/classes/class-wpie-general.php. Это позволяет неаутентифицированным...
CVE-2026-17566
CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC PoC d'exécution de code à distance pour l'outil Import/Export Data de pgAdmin 4. En exploitant la divergence de sémantique d'échappement par antislash entre le vérificateur de parenthèses isqueryparensbalanced et psql, injectez \copy ... TO...
CVE-2024-7514
CVE-2024-7514 إضافة Comments Import & Export لووردبريس = 2.3.7 - قراءة ملفات عشوائية للمستخدمين المصادَق عليهم بصلاحية Author فأعلى عبر اجتياز الدليل Directory Traversal الوصف إضافة Comments Import & Export لووردبريس معرّضة لقراءة ملفات عشوائية بسبب عدم كفاية التحقق من صحة مسار الملف أثناء عملية...
CVE-2024-54262
CVE-2024-54262 استغلال CVE-2024-54262: رفع ملفات عشوائي في Import Export for WooCommerce نظرة عامة يستغل هذا السكربت ثغرة في إضافة "Import Export for WooCommerce" الخاصة بووردبريس. تسمح الثغرة للمستخدمين غير المصرح لهم برفع ملفات عشوائية، مما قد يؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE. الميزات:...
Exploit for CVE-2026-105844
CVE-2026-105844 — Payload CMS import-export prototype pollutio...
CVE-2026-105844
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
Payload: Prototype pollution in Payload Import Export plugin
Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...
GHSA-QF28-8HC6-VWRP Payload: Prototype pollution in Payload Import Export plugin
Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled, allowing an attacker to submit and execute remote code RCE. Applications that do not use @payloadcms/plugin-import-export are not affected. Patches Users should upgrade Payload...
EUVD-2026-93470
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
CVE-2026-105844
Payload , a headless content management system, contains a prototype pollution vulnerability in the @payloadcms/plugin-import-export plugin. An unauthenticated user can submit prototype-sensitive field paths, leading to unintended application behavior and potential remote code execution (RCE) . T...
CVE-2026-105844 Payload: Prototype pollution in Payload Import Export plugin
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
PT-2026-106776
Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.87.9 Payload versions 4.0.0-canary.0 through 4.0.0-canary.26 Description An unauthenticated user can cause unintended application behavior when the @payloadcms/plugin-import-export plugin is enabled. By...
CVE-2026-105844: Improperly Controlled Modification of Object Prototype Attributes
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended applicatio...
activemq-cve-lab
ActiveMQ Message Broker Vue d'ensemble Application de courtier de messages ActiveMQ avec fonctionnalités d'import/export de messages. Version : 5.11.1 Fonctionnalités Gestion des files de messages Statistiques et surveillance des files Import/export de fichiers de messages Statut du courtier en...
CVE-2026-32584
Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4....