cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identifiziert in der Funktion createSessionInternal der Datei PackageInstallerService.java, ist eine Schwachstelle mit hohem Schweregrad, die Android-Versionen 12 und 13 betrifft. Diese Schwachstelle ermöglicht es einem Angreifer, einen „run-as any app“-Angriff...

cve-2017-12945

CVE-2017-12945 CVE-2017-12945 के लिए शोषण Mersive Solstice Pods में एक रिमोट प्रमाणित ब्लाइंड OS कमांड इंजेक्शन कमजोरी मौजूद है - जो Mersive Technologies Inc. द्वारा डिज़ाइन किया गया एक वायरलेस सहयोग और प्रस्तुति प्लेटफ़ॉर्म है - जो 2.8.4 से पहले के फर्मवेयर संस्करणों पर चलता है, जैसा कि विक्रेता...

gitlab-exploit

gitlab-exploit GitLab CVE-2023-7028 GitLab CVE-2023-7028 La vulnerabilità è stata causata da un bug nel modo in cui GitLab gestiva la verifica dell'email durante la reimpostazione della password. Un attaccante poteva fornire due indirizzi email durante una richiesta di reimpostazione della passwo...

CyberPanel - Command Injection

CyberPanel contains a command injection vulnerability in the /ftp/getresetstatus and /dns/getresetstatus endpoints.The vulnerability exists due to improper validation of the 'statusfile' parameter, which is directly used in a shell command.The security middleware only validates POST requests,...

FLIR AX8 1.46.16 - Remote Command Injection

FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulnerability.The vulnerability exists in the alarm functionality where user-supplied input in the 'id' parameter is not properly sanitized,allowing attackers to inject and execute arbitrary OS...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request Per le applicazioni web che utilizzano DEDECMS 5.71SP1 e versioni precedenti, si verificano...

CVE-2025-55887

CVE-2025-55887 Descrizione Una vulnerabilità di Cross-Site Scripting XSS è stata scoperta nel servizio di prenotazione pasti ARD. La vulnerabilità esiste nel parametro GET transactionID nella pagina di conferma della transazione. A causa di una convalida dell'input e di una codifica dell'output...

CVE-2025-48593

CVE-2025-48593: Esecuzione di codice remoto zero-click nel sistema Android Autore: LAKSHMIKANTHAN K letchupkt Data: novembre 2025 Gravità: Critica Una vulnerabilità critica di esecuzione di codice remoto zero-click che colpisce i dispositivi Android 13-16. Panoramica della vulnerabilità Attributo...

CVE-2025-54123

CVE-2025-54123 Panoramica Esecuzione remota di codice autenticata nell'endpoint API middleware di HoverFly a causa di una convalida dell'input insufficiente e di un'esecuzione di comandi non sicura. Flusso di attacco 1. Autenticazione L'attaccante si autentica su HoverFly utilizzando credenziali...

EUVD-2026-68013

Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFortiGateSyslogEvent.java and...

CVE-2023-6634

Script di Exploit per CVE-2023-6634 Descrizione Questo repository contiene uno script Python progettato per sfruttare la vulnerabilità CVE-2023-6634 trovata nel plugin LearnPress per WordPress, versioni fino alla 4.2.5.7 inclusa. La vulnerabilità permette l'esecuzione remota di codice RCE a causa...

EUVD-2026-66403

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

EUVD-2026-66391

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

EUVD-2026-66393

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66392

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66383

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...

EUVD-2026-66364

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66384

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...