91125 matches found
CVE-2024-55890
This repository does not have a README...
CVE-2020-21365
Este repositorio no tiene un README...
CVE-2024-26560
此存储库没有 README。...
CVE-2024-26535
此存储库没有 README。...
CVE-2024-25809
此存储库没有 README。...
CVE-2024-25278
此存储库没有 README。...
CVE-2025-505050
CVE-2025- 描述： 未经验证可访问上传的文件 POC： 导航至任何上传的文件，无需登录即可访问 发现者：Aljohara Abdulmohsen Alsubaie...
check_icmp_dos-CVE-2018-4407-
原理 原理就是把"icmp"包的其他字段弄成非法 macOS or iphone 内核解析時沒實作檢查大小造成 crash 了 設備 1. Apple iOS 11及更早版本：所有設備 2. Apple macOS High Sierra（受影響的最高版本為10.13.6）：所有設備 3. Apple macOS Sierra（受影響的最高版本為10.12.6）：所有設備 4. Apple OS X El Capitan及更早版本：所有設備 蘋果在10月30日推出的"iOS 12.1"更新包中徹底修復了這個漏洞 關鍵代碼 root@kitploit: pip install scapy...
CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration
Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...
CVE-2026-81904 Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration
Concrete CMS below 9.5.3 registered view assets for every sub-block of a Stack, Container, or layout area without checking whether the requesting user could view that sub-block. An unauthenticated visitor could recover configuration values emitted by a restricted sub-block's asset registration —...
CVE-2026-81904
Concrete CMS below 9.5.3 is affected by a missing authorization flaw in the asset registration for sub-blocks within a Stack , Container , or layout area. The system registered view assets for every sub-block without verifying whether the requesting user had permission to view that sub-block, all...
CVE-2020-17087
此存储库没有 README。...
CVE-2026-66804
CVE-2026-66804：跨设备虚拟摄像头权限提升 独立发现并报告了该问题，现编号为 CVE-2026-66804。MSRC 确认该提交是较早前报告的重复项，根本原因同为 Windows 相机 FrameServer 的底层问题。 标准 Windows 用户可以在 C:\ProgramData\CrossDevice 下创建缺失的受信路径，植入已注册的 Cross Device 虚拟摄像头 COM DLL，并导致 Windows 相机 FrameServer 以 NT AUTHORITY\LOCAL SERVICE 身份加载攻击者控制的代码。附带的证明链利用服务令牌启用的...
CVE-2026-86085 n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...
CVE-2026-86085
n8n (open-source workflow automation platform) prior to 2.37.7 and 2.38.2 suffered a cross-tenant information disclosure vulnerability in its role assignment endpoints (/rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members). The affected controller (packages/cli/src/c...
CVE-2026-86085 n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...
CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...
CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...
CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, a Log Streaming event destination could reference a generic HTTP credential and decrypt whichever credential ID it named without an ownership check. A user with a custom global role carrying Log Streaming...