CVE-2022-23046

CVE-2022-23046 La scoperta originale e il PoC manuale provengono da Fluidattacks: PhpIPAM v1.4.4 consente a un utente amministratore autenticato di iniettare istruzioni SQL nel parametro "subnet" durante la ricerca di una subnet tramite app/admin/routing/edit-bgp-mapping-search.php. Questo PoC...

CVE-2017-5487

Installazione ed Esecuzione dello script 💻 Prerequisiti Prima di iniziare, assicurati di avere i seguenti strumenti installati sulla tua macchina : Python 3.x Git pip per gestire le dipendenze Python Passaggi di Installazione 1. Clonare il repository Usa git per clonare il repository :...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / Die Offsets können abweichen, der Kernel wurde individuell kompiliert. Beim Testen kannst du vmlinux lesen und den Offset berechnen. / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define...

CVE-2023-36144

CVE-2023-36144 PoC für CVE-2023-36144 - Intelbras Switch SG 2404 MR L2+ Firmware 1.00.54 Sicherungsdatei ohne Authentifizierung herunterladen Schritte zur Reproduktion: 1. Rufen Sie den folgenden Link auf: http://127.0.0.1/cgi-bin/exportCfgwithpasswd ersetzen Sie 127.0.0.1 durch die IP-Adresse de...

CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure

CVE-2024-1302 --- Badgermeter moni tool - Esposizione di informazioni sensibili https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. Link del software :...

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Divulgazione di informazioni senza autenticazione Una proof-of-concept per CVE-2023-23752 Joomla! v4.2.8 - Divulgazione di informazioni senza autenticazione. Per le versioni 4.0.0 4.2.8 ovvero dalla 4.0.0 fino alla 4.2.7. Per Iniziare Esecuzione del programma Con...

CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer contains a validation process that returns overly descriptive error messages when processing malformed input, enabling an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input. The CVSS 3.1 score is 3.9 (LOW...

graphql-cop

GraphQL Cop - Utility di Audit di Sicurezza per GraphQL Informazioni GraphQL Cop è un piccolo utility Python per eseguire test di sicurezza comuni contro API GraphQL. GraphQL Cop è perfetto per eseguire controlli CI/CD in GraphQL. È leggero e copre problemi di sicurezza interessanti in GraphQL...

CVE-2024-39719

Анализ уязвимости раскрытия существования файлов в Ollama CVE-2024-39719 中文 Обзор уязвимости CVE-2024-39719 — это уязвимость раскрытия информации о существовании файлов, затрагивающая Ollama версии 0.3.14 и более ранние. Эта уязвимость позволяет злоумышленникам определять наличие конкретных файло...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

CVE-2018-13797

node-macaddress Recupera gli indirizzi MAC in Linux, OS X e Windows. Un equivoco comune sugli indirizzi MAC è che ogni host abbia un indirizzo MAC, mentre un host può avere più indirizzi MAC – poiché ogni interfaccia di rete può avere il proprio indirizzo MAC. Questa libreria consente di...

CVE-2024-50633

CVE-2024-50633 🏆 - CVE-2024-50633 : Indico BOLA भेद्यता Indico में BOLA भेद्यता की खोज और रिपोर्ट की गई। 📜 विवरण CVE-2024-50633 Indico v3.2.9 में ब्रोकन ऑब्जेक्ट लेवल ऑथराइज़ेशन BOLA भेद्यता हमलावरों को API अनुरोधों में हेरफेर करके संवेदनशील उपयोगकर्ता जानकारी तक पहुँचने की अनुमति देती है। खोज...

CVE-2024-39722

Инструмент эксплуатации Ollama CVE-2024-39722 Этот инструмент предназначен для эксплуатации CVE-2024-39722 — уязвимости раскрытия наличия моделей в Ollama версиях до 0.1.45 включительно. Он позволяет проверить, уязвим ли сервер Ollama, и попытаться обнаружить существующие модели на сервере. Кроме...

CVE-2026-37066

CVE-2026-37066 Path Traversal, die zu beliebigem Dateilesen führt, in /vfm-admin/index.php und /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 ermöglicht einem authentifizierten Angreifer mit Superadministrator-Rolle, vertrauliche Informationen über zwei speziell gestaltete...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

CVE-2024-46635

CVE-2024-46635 Contesto Il sistema GongZhiDao è una piattaforma sviluppata da GongZhiDao. Fornisce soluzioni aziendali che includono gestione utenti, analisi dei dati e funzionalità operative. Tuttavia, è stata scoperta una vulnerabilità di sicurezza in uno degli endpoint API che potrebbe...

CVE-2026-77507

Weblate , a web-based continuous localization platform, is affected by an information disclosure vulnerability in its object-scoped RSS feeds prior to version 2026.8 . The root cause is that these feeds fail to enforce the permission checks applied elsewhere, allowing unauthorized users to read c...

CVE-2026-77507 Weblate: Object-scoped RSS feeds disclose private change history to unauthorized users

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, Weblate's object-scoped RSS feeds do not apply the permission checks used elsewhere, allowing unauthorized users to read change-history metadata from private projects and...

CVE-2024-48307POC

ثغرة حقن SQL في واجهة getDictItemsByTable في jeecg-boot الخيارات: root@kitploit: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 -c CONTENT, --content CONTENT 输入任意值查看漏洞详情 أمثلة: root@kitploit: 单个检测： python .\CVE-2024-48307Poc.p...