CVE-2025-0924-different

Другие уязвимости, обнаруженные при анализе CVE-2025-0924 01. Обзор Stored XSS, WordPress и WP Activity Log 1 Обзор Stored XSS, WordPress и WP Activity Log Stored XSS — это уязвимость, при которой вредоносный скрипт сохраняется на сервере и автоматически выполняется, когда другие пользователи...

CVE-2025-55887

CVE-2025-55887 Description Cross-Site Scripting XSS vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject...

Cisco ASA Improper Input Validation (CVE-2020-3304)

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...

CVE-2026-58834: Improper Input Validation

In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Cisco ASA Improper Input Validation (CVE-2019-1687)

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

The vulnerability of the Apache ActiveMQ software platform, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the Apache ActiveMQ software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

PT-2026-106205

Name of the Vulnerable Software and Affected Versions Ghost versions 6.14.0 through 6.26.0 Description An input validation issue in this Node.js content management system may allow staff users to access local files located outside the intended data storage directories on the server. Recommendatio...

Cisco ASA NULL Pointer Dereference (CVE-2024-20426)

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

Cisco ASA Command Injection (CVE-2021-1488)

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

PT-2026-106200

Name of the Vulnerable Software and Affected Versions Ghost versions 5.9.0 through 6.44.0 Description An input validation issue in this Node.js content management system allows members to access comments for which they lack proper authorization. Recommendations Update to version 6.44.1...

CVE-2026-101919: Improper Input Validation

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

CVE-2025-48593

CVE-2025-48593 : Exécution de code à distance sans clic dans le système Android Auteur : LAKSHMIKANTHAN K letchupkt Date : Novembre 2025 Sévérité : Critique Une vulnérabilité critique d'exécution de code à distance sans clic affectant les appareils Android 13 à 16. Aperçu de la vulnérabilité...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

CVE-2025-54123

CVE-2025-54123 Обзор Удалённое выполнение кода с аутентификацией в конечной точке промежуточного ПО HoverFly из-за недостаточной проверки ввода и небезопасного выполнения команд. Последовательность атаки 1. Аутентификация Атакующий проходит аутентификацию в HoverFly, используя действительные...

CVE-2025-54123-Poc

CVE-2025-54123 Exploit Hoverfly Authenticated Middleware Command Injection RCE | CVSS 9.8 CRITICAL Vulnerability Hoverfly -u -p -c --shell SHELL -t, --target - Hoverfly API endpoint required -u, --username - Admin username required -p, --password - Admin password required -c, --command -...

CVE-2025-49132-PoC

CVE-2025-49132 PoC от Pwndalf Обзор Этот репозиторий содержит Proof of Concept PoC для CVE-2025-49132 — уязвимости удалённого выполнения кода RCE, затрагивающей Pterodactyl Panel -l -p...

CVE-2021-3754

CVE-2021-3754 This repository documents Vulnerability details and exploit for CVE-2021-3754 discovered and reported by myself on 21st August 2021 Metrics CWE-20: Improper Input Validation CVSS: 5.3 MEDIUM Description A flaw was found in Apache Keycloak & Redhat SSO where an attacker is able to...

CVE-2024-20404

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent ...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE Анализ причин уязвимости 1. Отсутствие проверки безопасности кода Проблема: В системе не проводится никакой проверки безопасности предоставленного пользователем исходного кода. Доказательства: В методе generateexecutionscript код пользователя напрямую вставляется в скрипт...

CVE-2022-24087

CVE-2022-24087-RCE и CVE-2022-24086-RCE Описание CVE CVE-2022-24086 и CVE-2022-24087 — это уязвимость неправильной проверки входных данных в форме обратной связи Magento Open Source и Adobe Commerce, получившая оценку CVSS 9.8 из 10. Она классифицируется как проблема, не требующая аутентификации,...