CVE-2017-14980_syncbreeze_10.0.28_bof

익스플로잇 - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 이 저장소는 CVE-2017-14980 으로 식별된 취약점을 대상으로 Sync Breeze Enterprise 버전 10.0.28에 대한 개념 증명 버퍼 오버플로우 익스플로잇BOF을 포함합니다. 설명 이 취약점은 /login 엔드포인트에 대한 POST 요청에서 password 필드를 처리할 때 부적절한 입력 검증으로 인해 존재합니다. 공격자는 이 필드에 지나치게 긴 값을 보내 EIP 를 덮어쓰고 임의 코드 실행을 가능하게 할 ...

CVE-2023-43355-CMSmadesimple-Reflected-XSS---Add-user

CMSmadesimple 반사 XSS v2.2.18 작성자: Sergio 설명: CMSmadesimple v.2.2.18의 install/adduser.php에 있는 여러 교차 사이트 스크립팅XSS 취약점으로 인해 로컬 공격자가 My Preferences - Add user의 비밀번호 및 비밀번호 확인 필드에 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. 공격 벡터: 'My Preferences - Add user'의 비밀번호 및 비밀번호 확인 입력 값의 위생 처리sanitization 취약점을 통해 JavaScri...

CVE-2023-29084

CVE-2023-29084 ManageEngine ADManager Plus의 명령 주입 Poc POST /api/json/admin/saveServerSettings HTTP/1.1 Host: 10.10.10.99:8080 Content-Length: 183 Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64...

CVE-2026-88280

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88280 GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88280 GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies an oversized ONVIF SetUser password into a fixed stack field, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

EUVD-2026-66662

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

UnPoller version 2.33.0 is vulnerable to a path traversal vulnerability in the password field. The application fails to perform path checks when a password starts with the file:// prefix, causing it to read arbitrary files from the local disk via os.ReadFile() in pkg/inputunifi/input.go. An attac...

PT-2026-82244

Name of the Vulnerable Software and Affected Versions UnPoller version 2.33.0 Description A path traversal issue exists in the password field, which allows an attacker to read arbitrary files and perform network exfiltration. Path traversal is a technique used to access files and directories that...

CVE-2026-36851: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

CVE-2026-36851

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...

EUVD-2026-56982

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and...

CVE-2026-71237

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from $POST'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='$username' and password='$password' limit 1". The username value is...

CVE-2026-71237

Miantang IoT-PHP is affected by an unauthenticated SQL injection in the index.php POST /userlogin route. The code reads the password from $_POST['pwd'] and directly concatenates it into a SQL query: select * from userlists where username='$username' and password='$password' limit 1, without prope...

CVE-2026-71237 Miantang IoT-PHP - Unauthenticated SQL Injection in /userlogin

Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly from 'pwd' with no sanitization and concatenates it into a raw SQL string: mysqlquery"select from userlists where username='' and password='' limit 1". An unauthenticated attacker can submit a payload...

CVE-2026-16655 Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Name Field Nested password Member in all versions up to, and including, 6.2.7 due to insufficient input sanitization and output escaping...

EUVD-2026-50270

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Name Field Nested password Member in all versions up to, and including, 6.2.7 due to insufficient input sanitization and output escaping...

PT-2026-65772

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Name Field Nested password Member in all versions up to, and including, 6.2.7 due to insufficient input sanitization and output escaping...