Nagios XI < 5.11.3 - SQL Injection

SQL injection vulnerability in Nagios XI before version 5.11.3 via the bulk modification tool. id: CVE-2023-48084 info: name: Nagios XI 5.11.3 - SQL Injection author: ritikchaddha severity: critical description: | SQL injection vulnerability in Nagios XI before version 5.11.3 via the bulk...

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10547 info: nam...

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions have unauthenticated compliancepolicies.inc.php SQL injection. Because nodes' passwords are stored in cleartext by default, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10546 info: name:...

Cisco IOS HTTP Configuration - Authentication Bypass

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. id: CVE-2001-0537 info: name: Cisco IOS HTTP Configuration - Authentication Bypass author:...

Pega Infinity - Authentication Bypass

Pega Infinity versions 8.2.1 through 8.5.2 contain an authentication bypass vulnerability because the password reset functionality for local accounts can be used to bypass local authentication checks. id: CVE-2021-27651 info: name: Pega Infinity - Authentication Bypass author: idealphase,daffainf...

Codoforum 5.1 - Arbitrary File Upload

Codoforum 5.1 contains an arbitrary file upload vulnerability via the logo change option in the admin panel. An attacker can upload arbitrary files to the server, which in turn can be used to make the application execute file content as code. As a result, an attacker can potentially obtain...

Oracle WebLogic Server - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions...

Ghost CMS - User Enumeration

Ghost CMS 5.9.4 contains a user enumeration vulnerability in the login functionality. The application reveals whether a user account exists through different error messages, allowing attackers to enumerate valid user accounts via specially-crafted HTTP requests. id: CVE-2022-41697 info: name: Gho...

Oracle Business Intelligence - Path Traversal

Oracle Business Intelligence versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0 are vulnerable to path traversal in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. id: CVE-2019-2588 info: name: Oracle Business Intelligence - Path...

snyk-js-jquery-565129

This repository contains the patches for CVE-2020-11022 and CVE-2020-11023 which affect all jQuery versions prior 3.5.0, including the patches from DanielRuf/snyk-js-jquery-174006. These patches were generated with diff -u original patched patchfile. Apply the patches You can apply the patches wi...

snyk-js-jquery-174006

This repository contains the patches for CVE-2019-11358 - prototype pollution vulnerability which affects all jQuery versions prior 3.4.0. These patches were generated with diff -u original patched patchfile. Apply the patches You can apply the patches with patch, git apply, patch-package and...

Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...

CVE-2022-30190_Temporary_Fix_Source_Code

🩹CVE-2022-30190 Temporary Fix🩹 Source Code These are the source codes of two Python scripts compiled to easily and quickly apply temporary protection against the CVE-2022-30190 vulnerability Follina Both can be programmed better, but this is just to implement it as quickly as possible and I did i...

Vulnerability-Management

Vulnerability Management Report Prepared for: CyberTech Solutions Prepared by: Victoria Simon Date: April 10, 2024 1. Executive Summary This report details the findings from a comprehensive vulnerability assessment conducted on CyberTech Solutions' Linux infrastructure and web applications using...

EUVD-2026-43180

PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass...

PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass

Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass Summary praisonai-platform lets an ordinary workspace member patch owner-created project, issue, and agent records even though the paired delete routes enforce owner/admin authorization. For...

EUVD-2026-44644

PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization...

CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

Philips-PM-5139-5138A-5136-Firmware-Project

Philips PM5139 — ファームウェアリバースエンジニアリング 1994年頃の20 MHzファンクションジェネレータをソフトウェア的に分解した：2つの EPROMダンプ、測定器として使う8051エミュレータ、そして35 セクションのドキュメント。そこではすべての主張がリスティングの アドレス、エミュレータによる測定、または回路図によって裏付けられている。 その果てにあるのは、Philipsが出荷した欠陥を修正したファームウェア V2.0 、 独自の6つの任意波形、そしてオリジナルのROMを命令単位で実行する ブラウザシミュレータである。...

specterops-k8s-red-teamers-libvirt-patch

Red Teamer용 SpecterOps Kubernetes Libvirt 패치 무료 SpecterOps Kubernetes for Red Teamers 강좌를 위한 비공식 libvirt 및 QEMU/KVM 패치입니다. 원래 네트워크 주소, Kubernetes 토폴로지, Mythic 콜백 및 랩 동작은 변경되지 않습니다. 왜? Linux에서 VirtualBox를 실행하는 것은 이미 전력망에 연결된 집에 휴대용 발전기를 가져오는 것과 같습니다. 커널이 이미 제공하는 것을 두 번 지불하면서, 동시에 또 다른 하이퍼바이저와 커널 모...