721 matches found
CVE-2022-41040-POC
CVE-2022-41040-POC CVE-2022-41040 - Microsoft Exchange Server 中的服务器端请求伪造 SSRF 手动利用 1. 将 COLLABHERE 替换为你的 OOB 域名 - sed 's/COLLABHERE//g 2. 在你想要测试的 URL 后面添加 payload - echo http://target.com|unfurl format %s://%d/ 3. 访问构造好的 URL 4. 检查你的 collaborator Payloads: root@kitploit:...
CVE-2022-43271
CVE-2022-43271 Cross-Site Scripting XSS almacenado Producto: Move CRM https://inhabit.com.au/Move-Real-Estate-CRM-Software Fecha de descubrimiento: 2/8/2022 Fecha de corrección: 4/8/2022 Versión afectada: versión 4, build 260 Versión corregida: versión 4, build 261 Descripción: La vulnerabilidad...
CVE-2023-51802
CVE-2023-51802 Simple Student Attendance System v.1.0 - attendancereport 中的跨站脚本 XSS 漏洞 描述 : Simple Student Attendance System v.1.0 中的跨站脚本漏洞允许远程攻击者通过向 attendancereport 组件的 "page" 或 "classmonth" 参数传递精心构造的负载来执行任意代码。 受影响产品版本 : Simple Student Attendance System v.1.0 CVE 作者 : Geraldo Alcântara 日期 :...
CVE-2024-23747
CVE-2024-23747 El Sistema de Gestión Hospitalaria ModernaNet 2024 de Moderna Sistemas es susceptible a una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR. PoC Esta vulnerabilidad reside en el manejo que hace el sistema del acceso a los datos de usuario a través de una URL...
CVE-2025-25615
CVE-2025-25615 Unifiedtransform v2.0 es vulnerable a un control de acceso incorrecto, lo que permite a los profesores ver la lista de asistencia de todas las secciones de clase. Proveedor: Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación como profesor. Paso 2: Navegue hasta el siguient...
CVE-2024-33453
CVE-2024-33453 通过对象级访问控制导致敏感数据泄露（esp-idf） 描述 esp-idf 框架版本 5.1 中存在一个缓冲区溢出漏洞，该框架被某些 Schoolbox 产品使用，允许远程攻击者通过不当的对象级访问控制获取敏感信息。此漏洞通过操纵与 externalId 组件关联的 id 参数触发，导致未授权访问敏感数据。 附加信息 esp-idf 框架的 externalId 组件存在一个漏洞，导致对象级访问控制不当。此问题允许经过身份验证的用户通过更改 URL 中的 id 参数来访问属于其他用户的数据。 漏洞 URL 示例 经过身份验证的用户可以更改 URL 中的 id...
CVE-2024-53677
CVE-2024-53677: Vulnerabilidad de path traversal a RCE en Apache Struts Se ha encontrado una vulnerabilidad de seguridad crítica, identificada como CVE-2024-53677, en Apache Struts, que permite a los atacantes manipular los parámetros de carga de archivos, lo que puede conducir a un path traversa...
CVE-2023-50164Analysis-
CVE-2023-50164: Apache Struts 易受攻击的应用 一个被标识为 CVE-2023-50164（CVE 评分：9.8）的关键安全漏洞在 Apache Struts 中被发现，该漏洞允许攻击者操纵文件上传参数，可能进而导致未授权路径遍历和远程代码执行（RCE）。 应用 为 CVE 分析开发了一个简单的测试应用。 使用 Docker 文件运行 首先使用 docker build 命令构建应用： root@kitploit: docker build -t exploitable -f DOCKERFILE . 然后，使用 docker run 命令运行应用：...
CVE-2026-6356
Augmentt: Escalada de privilegios mediante manipulación de parámetros Créditos Este CVE fue un esfuerzo colaborativo entre: HelloWorld Autor – GitHub: https://github.com/Penquinsecq Raznov – GitHub: https://github.com/basraznov Descripción Una vulnerabilidad en la aplicación web permite a los...
CVE-2026-73789 Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM Web Interface
A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...
CVE-2021-22873-EXPLOIT
CVE-2021-22873 - Vulnerabilidad de Redirección Abierta en Revive Adserver Las versiones de Revive Adserver anteriores a la 5.1.0 son vulnerables a redirecciones abiertas a través de los parámetros dest, oadest y/o ct0 de los scripts de entrega lg.php y ck.php. Originalmente, esta funcionalidad fu...
CVE-2026-19651
CVE-2026-19651 affects the quarkus-spring-web extension in IBM Enterprise Build of Quarkus versions 3.27.1–3.27.5 and 3.33.1–3.33.3 . The root cause is that the system incorrectly reads the URL query string as a request header, resulting in incorrect mapping of values to untrusted query string in...
CVE-2026-86284
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.java. The manipulation of the argument...
CVE-2026-86278
A cross-site scripting (XSS) vulnerability exists in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 , affecting an unknown function in manage_subjects.php . Manipulation of the msg/title/content arguments results in XSS, exploitable remotely with user interaction req...
CVE-2026-85406
Eleveo Quality Management 9.7.0 contains a cross-site scripting (XSS) vulnerability in the Conversation Review component. The flaw allows remote exploitation with low privileges and requires user interaction, resulting in a low integrity impact (CVSS 3.1 base score 3.5 , severity LOW ). The explo...
EUVD-2026-69057
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...
CVE-2026-84148
This vulnerability is an Insecure Direct Object Reference (IDOR) in the Manacle Technologies ERP System . The root cause is improper authentication and authorization controls in an API endpoint, allowing an unauthenticated remote attacker to manipulate a parameter and expose sensitive information...
CVE-2026-75460
XueZhiSi Open Source Exam System = 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester...
EUVD-2026-58274
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...