506 matches found
CVE-2021-41773S
CVE-2021-41773 Apache パストラバーサル向けの脆弱な Docker イメージ この脆弱性は、特定の非デフォルト設定を持つバージョン 2.4.49 にのみ 影響します。特定の状況では、ファイル読み取りまたはコード実行につながる可能性があります。 https://twitter.com/ptswarm/status/1445376079548624899 ファイル読み取りが可能な脆弱な設定 コンテナはDocker Hubから直接取得できます。 docker pull blueteamsteve/cve-2021-41773:no-cgid そして次のコマンドで実行できます...
CVE-2019-0232
CVE-2019-0232 エクスプロイト CGI サーブレットにおけるリモートコード実行 RCE – Windows 上の Apache Tomcat 参考 : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ root@kitploit: Apache Tomcat には CGI サーブレットに脆弱性があり、これを悪用してリモートコード実行 RCE...
CVE-2020-35590
エクスプロイト情報 エクスプロイトタイトル: WordPress Plugin Limit Login Attempts Reloaded 2.13.0 - ログイン制限バイパス CVE: CVE-2020-35590 日付: 2020-06-09 エクスプロイト作成者: N4nj0 ソフトウェアリンク: https://wordpress.org/plugins/limit-login-attempts-reloaded/ バージョン: 2.13.0 テスト環境: WordPress 5.4.1, 5.4.2 脆弱性勧告:...
CVE-2021-41773
CVE-2021-41773 Apacheパストラバーサル用の脆弱なDockerイメージ この脆弱性は、特定の非デフォルト設定を持つバージョン2.4.49 のみ に適用されます。状況によっては、ファイル読み取りまたはコード実行につながる可能性があります。 https://twitter.com/ptswarm/status/1445376079548624899 脆弱なファイル読み取り設定 コンテナはDocker Hubから直接プルできます。 docker pull blueteamsteve/cve-2021-41773:no-cgid 以下のコマンドで実行します。 docker ru...
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
EUVD-2026-79945
Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processing was set to the non-default "Reject files containing potentially harmful elements" mode concrete.filemanager.images.svgsanitization.action = reject, uploaded SVGs were checked...
Astra Linux – Vulnerability in OpenSSL
Issue Summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions. Impact Summary: Attackers may exploit certain server configurations to trigger unbounded memory growth, leading to a Denial of Service attack. This issue can occur in...
Astra Linux – Vulnerability in OpenSSH
In OpenSSH 6.2 through 8.x, prior to version 8.8, when certain non-default configurations were used, privilege escalation could occur because supplementary groups were not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand might run with privileges...
Astra Linux – Vulnerability in OpenSSL
Applications that use non-default options when verifying certificates may be vulnerable to attacks from a malicious Certificate Authority CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL, and other certificate policy checks for tho...
CVE-2026-19723
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...
CVE-2026-19723: Improper Neutralization of Input During Web Page Generation
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...
CVE-2026-19796
The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...
CVE-2026-55400
CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service...
CVE-2026-55400
CVE-2026-55400 describes an integer underflow in Secure Access servers prior to 14.57. With an authenticated session, an attacker can send specially crafted traffic to a server in a non-default configuration, causing a persistent denial of service. Affected product/version: Secure Access servers
CVE-2026-55400: Integer Overflow or Wraparound
CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service...
CVE-2026-66774 Multiple vulnerabilities in SAP Business AI Platform (Approuter)
SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on...
CVE-2026-66774
SAP Approuter in SAP Business AI Platform contains multiple vulnerabilities related to error handling under non-default configurations. An attacker with low privileges could exploit conditions outside their control to affect availability , with no impact on confidentiality or integrity reported. ...
EUVD-2026-55886
SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on...
CVE-2026-66774 Multiple vulnerabilities in SAP Business AI Platform (Approuter)
SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on...