proofpoint-CVE-2023-0089

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución Remota de Código - Usuario autenticado de bajo nivel a RCE de administrador CVE: CVE-2023-0089 Cronología: Descubierto ...

CVE-2023-23397_EXPLOIT_0DAY

CVE-2023-23397EXPLOIT0DAY Exploit for the CVE-2023-23397 Credit to domchell EML/MSG Checker for the exploit: !/usr/bin/env python3 from extractmsg import AppointmentMeeting from ..helpers import Status from ..task import Task from ..report import Report from .base import BaseWorker class...

CVE-2023-23397

CVE-2023-23397 PoC de CVE-2023-23397 en C 1- descargar el msgkit 2- editar la clase appointment y añadir lo siguiente: 3- crear una nueva clase dentro del proyecto para establecer las propiedades del archivo msg: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Lin...

CVE-2022-46104---POC

CVE-2022-46104 https://www.sourcecodester.com/ Se ha descubierto XSS en la página loginn.php del Proyecto Human Resource Management System: Payload de ejecución: http://localhost/hrm/loginn.php?msg=%3Cscript%3Ealert%27XSS%27%3C/script%3E...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflejado-Cross-Site-Scripting-Vulnerabilidad Autor del Exploit: ersinerenler Página del proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del software...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Descripción Existe una vulnerabilidad de cross-site scripting XSS reflejado en /dashboard/settings.php en Bank Management System in Web 1.0. La vulnerabilidad se produce debido a una sanitización incorrecta de la entrada proporcionada por el usuario en el parámetro G...

CVE-2023-45158

CVE-2023-45158 步骤 1. 运行 Web 服务器 cd web2py python3 web2py.py 2. 使用以下 URL 注入你的命令 http://:8000/hack?msg=%27%3B%3B%27。将 和 替换为你的值。 示例 1. 在服务器上创建一个文件 http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. 反弹 shell 在攻击者的机器上，运行 nc -l 127.0.0.1 8080 访问 URL...

CVE-2025-69606-GSVoIP-XSS

CVE-2025-69606 — Reflected XSS in GSVoIP Web Panel Severity: Medium | CWE: CWE-79 | Auth Required: No | Vector: Remote Summary A Reflected Cross-Site Scripting XSS vulnerability was identified in the GSVoIP Web Panel v2.0.90. The msg parameter of the error endpoint does not sanitize user-controll...

PT-2026-92352

In ap pmic poll msg handler of ap pmic ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92081

FreeRDP before 3.31.0 contains an integer overflow in the audin Apple backends when processing FramesPerPacket values from MSG SNDIN OPEN messages. Attackers can supply crafted FramesPerPacket values that cause AudioQueueAllocateBuffer size computation to wrap, resulting in undersized buffer...

PT-2026-92306

In gmc mb msg handler of gmc mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92365

In platform msg handler init of default msg handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: Fix load-tearing on sk-skstamp in sockrecvcmsgs. KCSAN found a data race in sockrecvcmsgs where the read access to sk-skstamp needs READONCE. BUG: KCSAN: data-race in packetrecvmsg / packetrecvmsg write marked to...

PT-2026-90869

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chat msg leads to cross site scripting. The attack...

CVE-2026-89609

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfsexorcisedaemon drops queued messages from a dying daemon without holding ecryptfsmsgctxlistsmux, but ecryptfsmsgctxalloctofree requires that lock. Take the list...

CVE-2026-89609

CVE-2026-89609 is a race condition in the eCryptfs component of the Linux kernel. The function ecryptfs_exorcise_daemon() drops queued messages from a dying daemon without holding the ecryptfs_msg_ctx_lists_mux lock, which ecryptfs_msg_ctx_alloc_to_free() requires. This allows concurrent access t...

CVE-2026-81004

CVE-2026-81004 affects the Linux kernel's IPMI message handler (ipmi:msghandler). When an error occurs during the startup of an IPMI interface, scheduled work may not be properly canceled before the interface is freed, which can prevent clean resource release and potentially lead to resource exha...

PT-2026-90325

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs exorcise daemon drops queued messages from a dying daemon without holding ecryptfs msg ctx lists mux, but ecryptfs msg ctx alloc to free requires that lock. Tak...

EUVD-2026-75220

A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This issue affects some unknown processing of the file index.php of the component Login Page. Executing a manipulation of the argument msg can lead to cross site scripting. The attack can...