The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

CVE-2026-14382

CVE-2026-14382 Bin 触发器 Bug 修复 $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 此漏洞的根本原因似乎与 CVE-2025-6558 相似。基于我目前的分析，我怀疑它可能是 CVE-2025-6558 的一个变体。因此，我改编了 CVE-2025-6558 的 PoC，并创建了以下文件： poc.c 是主要的 PoC，但仅适用于 32 位环境。与原始...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 至 6.15 允许远程代码执行 经过身份验证的远程低权限用户可上传可执行的 PHP 文件并执行系统命令。 漏洞位于消息函数中，原因是发送文件（如 shell.jpg.php.shell）时验证不足。 已在 Windows Server 2019 x64 上测试 使用方法： python CVE-2023-33253 -t 127.0.0.1 -u user -p user PoC：...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

Travelpayouts <= 1.1.16 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0337...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - 未认证任意文件上传 描述： Wux Blog Editor 插件（WordPress 版）在 3.0.0 及之前版本中，由于 wuxbtinsertImageNew 函数对文件类型验证不足，存在任意文件上传漏洞。这使得未认证攻击者能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行可 Link: CVE-2024-9932 State: PUBLISHED Score: 9.8 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H POC POST...

CVE-2024-53345

CVE-2024-53345 汽车租赁管理系统 1.0 - 1.3 版本中的严重 0 Day 漏洞 描述： 汽车租赁管理系统（版本 1.0 至 1.3）的系统设置模块文件上传功能中存在一个严重漏洞，允许低权限用户上传任意文件，包括可执行的 PHP 脚本。该漏洞源于文件类型验证不充分以及对上传目录的访问控制不当，使攻击者能够上传恶意文件，并无须身份验证即可公开访问这些文件。 通过利用此缺陷，攻击者可以上传 PHP shell，并随后在已上传文件的 URL 后附加 ?cmd=...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-在线护士招聘系统v1.0-SQL注入漏洞 漏洞利用作者：ugurkarakoc 厂商主页 https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql 软件链接 https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 概述 Online-Nurse-Hiring-System-v1.0 对 'username' 参数的输入验证和清理不足，可能导致 SQL 注入攻击，从而允许未经授权访问数据库并危及系统安全。 漏洞详...

CVE-2022-20699

CVE-2022-20699 🎧 由 Audiobahn 提供 Cisco Anyconnect VPN 未授权 RCE rwx stack 它并未经过充分检查。...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1774996482)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774996482 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux (crlsa-2026_46391)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202646391 advisory. github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation CVE-2026-44740 Bug Fixes and Enhancements: grafana /...

Rocky Linux 9.6 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.6:CLSA-2026:1777445847)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777445847 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

chromium-browser: angle: Insufficient validation of untrusted input in ANGLE

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506550494...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520571816...

chromium-browser: angle: Insufficient validation of untrusted input in ANGLE

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499124128...

chromium-browser: angle: Insufficient validation of untrusted input in ANGLE

An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513135862...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501483855...

chromium-browser: skia: chromium-browser: skia: Insufficient validation of untrusted input in Skia

An insufficient validation of untrusted input flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516915337...