CVE-2026-59787

The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inject a record targeting another host, resulting in a loss of integrity...

CVE-2024-48589

phpAbook 9.0i - 크로스 사이트 스크립팅XSS 취약점 CVE-2024-48589 요약: phpAbook 애플리케이션의 index.php의 rol 매개변수 또는 경로 섹션에서 크로스 사이트 스크립팅XSS 취약점이 발견되었습니다. 이 취약점으로 인해 공격자가 사용자의 브라우저에 임의의 JavaScript 코드를 주입할 수 있으며, 이로 인해 다음이 발생할 수 있습니다: 세션 쿠키를 포함한 민감한 정보 노출 애플리케이션 컨텍스트 내에서의 무단 작업 이 문제는 사용자 입력에 대한 부적절한 검증 및 정화sanitization...

CVE-2025-41088

CVE-2025-41088: Хранимая XSS в Xibo CMS Я обнаружил уязвимость Хранимого межсайтового скриптинга Stored XSS в Xibo CMS v4.1.2. Эта уязвимость позволяет аутентифицированному злоумышленнику внедрять вредоносные скрипты в приложение из-за некорректной проверки вводимых пользователем данных. Проблема...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance — множественные уязвимости проверки входных данных Публикация на Exploit-db: https://www.exploit-db.com/exploits/30290/ Статья Exploit-db: https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 — это уязвимость SQL-инъекции, обнаруженная в системе MODAPS проекта NASA EOSDIS, вызванная некорректной проверкой входных данных параметра category. Эта уязвимость позволяет злоумышленникам получать доступ к конфиденциальным данным и выполнять произвольные SQL-запросы через...

CVE-2025-24963

CVE-2025-24963 - Режим браузера Vitest - Чтение локального файла CVE-2025-24963 — это уязвимость средней степени серьезности оценка CVSS 3.1: 5.9, затрагивающая пакет @vitest/browser, компонент фреймворка тестирования Vitest на основе Vite. Эта уязвимость возникает из-за неправильной проверки...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20525

A vulnerability exists in the Modem component due to improper input validation , which can lead to a system crash . This flaw could result in a remote denial of service if a User Equipment (UE) connects to an attacker-controlled rogue base station. Exploitation requires no additional execution pr...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20525

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

EUVD-2026-92202

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

EUVD-2026-92203

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20524

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170...

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

CVE-2025-0924-different

Другие уязвимости, обнаруженные при анализе CVE-2025-0924 01. Обзор Stored XSS, WordPress и WP Activity Log 1 Обзор Stored XSS, WordPress и WP Activity Log Stored XSS — это уязвимость, при которой вредоносный скрипт сохраняется на сервере и автоматически выполняется, когда другие пользователи...

CVE-2025-55887

CVE-2025-55887 Описание В службе бронирования обедов ARD обнаружена уязвимость межсайтового скриптинга XSS. Уязвимость существует в GET-параметре transactionID на странице подтверждения транзакции. Из-за неправильной проверки входных данных и кодирования вывода злоумышленник может внедрить...

CVE-2026-20525: Reachable Assertion

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

PT-2026-106205

Name of the Vulnerable Software and Affected Versions Ghost versions 6.14.0 through 6.26.0 Description An input validation issue in this Node.js content management system may allow staff users to access local files located outside the intended data storage directories on the server. Recommendatio...