147 matches found
CVE-2025-29306_poc
Description Published: 2025-03-27 Updated: 2025-03-27 FoxCMS v.1.2.5의 문제로, 원격 공격자가 index.html 구성 요소의 case display page를 통해 임의의 코드를 실행할 수 있습니다. Usage: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc.py -f url.txt "id"...
CVE-2025-29306
POC - CVE-2025-29306 Vulnérabilité d'exécution de code FOXCMS /images/index.html Aperçu Un problème dans FoxCMS v.1.2.5 permet à un attaquant distant d'exécuter du code arbitraire via la page d'affichage des cas dans le composant index.html. POC complet En savoir plus — CVE-2025-29306 Avertisseme...
CVE-2021-40444--CABless
CVE-2021-40444--версия CABless Обновление: изменён код, так что нам больше не нужно полагаться на CAB-архивы. Файл "index.html", запускающий выполнение полезной нагрузки, будет содержать всего 1 строку кода внутри тега 'script': Прилагается статья в формате PDF. Обновление: ссылка на...
PYSEC-2026-1840 Pyramid static view path traversal up one directory
Impact This impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of the static view's file system path. No further path traversal exists, and the only file that could be...
PT-2026-36032
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...
CVE-2026-30661
CVE-2026-30661 affects iCMS v8.0.0 in the User Management component (index.html). The vulnerability is a Cross-Site Scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the regip or loginip parameters. The provided documents do not specify exploit details, affec...
CVE-2025-66963
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
PT-2025-51241
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
EUVD-2000-0352
Malware in sbrugna...
EUVD-2018-20901
Malware in sbrugna...
EUVD-1999-0554
Malware in sbrugna...
EUVD-2018-11567
Malware in sbrugna...
EUVD-2010-3276
Malware in sbrugna...
EUVD-2019-5482
Malware in sbrugna...
EUVD-2021-31633
Malicious code in bioql PyPI...
EUVD-2024-49104
Malicious code in bioql PyPI...
EUVD-2025-5544
Malicious code in bioql PyPI...
EUVD-2025-1563
Malicious code in bioql PyPI...
CVE-2024-29193
gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The index page index.html shows the available streams by fetching the API in the client side. Then, it uses Object.entries to iterate over the result whose first item name gets...