CVE-2026-105158

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

CVE-2026-105158 RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

EUVD-2026-92109

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

CVE-2026-105158

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

The vulnerability of the ReadyScript e-commerce management system, related to improper session management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ReadyScript e-commerce management system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the ReadyScript e-commerce management system lies in the improper implementation of the sequence of actions to be performed, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the IAM Proxy component of the Identity & Access Management tool for managing access to information resources allows a perpetrator to compromise the accessibility of protected information.

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the Shtab project and task management service, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.

The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2020-28148

CVE-2020-28148 攻击WIFI的常用方式，不仅仅适用于信锐（深信服子公司）WIFI产品，经多本人多次攻防实战发现，该漏洞利用方式可绕过多家AC厂商。 本文章用于披露漏洞利用方式，请勿将漏洞用于非法攻击，他人一切行为与本人无关。 English：https://github.com/fengchenzxc/CVE-2020-28148/blob/main/CVE-2020-28148English.md 信锐WIFI身份认证绕过漏洞0day 简介 此场景为信锐（深信服全资子公司）AP3600与AC6600，portal认证系统与AC管理WEB系统均为最新。其余产品未测试。...

cve-2018-15877

CVE-2018-15877 这是 Cved 的一部分： 一个用于管理易受攻击的 Docker 容器的工具。 Cved：https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/cve-2018-15877 镜像作者：https://github.com/cved-sources/cve-2018-15877...

securityonion

Security Onion Security Onion 是一个免费且开源的 Linux 发行版，用于威胁狩猎、企业安全监控和日志管理。它包含一套全面的工具，旨在协同工作，为您提供网络和主机活动的可见性。 ✨ 功能特性 Security Onion Console SOC ：用于分析安全事件和管理集群的统一 Web 界面。 Elastic Stack ：由 Elasticsearch 驱动的强大搜索。 入侵检测 ：基于网络的 IDS（使用 Suricata）和基于主机的监控（使用 Elastic Fleet）。 网络元数据 ：由 Zeek 或 Suricata 生成的详细网络元数据。...

kodex

Kodex Community Edition - CE は、プライバシーとセキュリティエンジニアリング のためのオープンソースツールキットです。データエンジニアリングワークフローにおけるデータセキュリティとデータ保護対策を自動化するのに役立ちます。以下の機能を提供します。 ファイル、データベース、メッセージキューなど、さまざまなソースからデータアイテムを読み取る。 これらのデータアイテムを、非識別化、マスキング、仮名化、匿名化、暗号化など、さまざまなプライバシーおよびセキュリティ強化変換を使用して保護する。 保護されたアイテムをさまざまな宛先に送信する。 Kodex...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

CVE-2021-40905

CVE-2021-40905 - 通过特制的 .mkp 文件实现 RCE 应用程序： CheckMK 管理 Web 控制台 软件版本： 小于或等于 2.0.0p17 攻击类型： RCE 解决方案： 待定，或 CheckMk 会手动审查在 https://exchange.checkmk.com/ 上共享的 MKP，检查是否存在恶意代码或可疑导入等。 摘要： CheckMk 企业版（版本 1.5.0 至 2.0.0p17）的 Web 管理控制台未正确过滤“.mkp”文件（即扩展包）的上传，从而可能导致远程代码执行。成功利用此漏洞需要访问 Web...