19196 matches found
CVE-2018-7935
CVE-2018-7935 POC まず有効なSessionを取得する curl http://192.168.8.1/html/index.html | grep SessionID 手順: exploit.py を編集し、取得した SessionID を挿入してください 脆弱性ステータス : 確認済み & パッチがリリースされました...
security-research
安全研究 漏洞研究文章。这里的每一条都对应一个已修复且公开跟踪的问题——没有纯理论性的发现。 Adel Bouachraoui — hydrasecurity.fr/v10/ · LinkedIn · YesWeHack 已发布 文章| 目标| 类型| ID ---|---|---|--- 当安全补丁守护了错误的分支| GNOME libsoup| 越界读取（CWE-125）| CVE-2026-12478 待披露 其余文章将保留至对应问题修复且通过相关项目完成披露审批后发布。 其他致谢 CVE-2026-28962 — Apple WebKit。恶意网页内容导致敏感信息泄露。已在...
EUVD-2026-70875
A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...
CVE-2026-85383
itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_del.php. The flaw is triggered by manipulating the ID argument in an unknown function within that file, allowing remote execution with low privileges required . The CVSS v3.1 score is 6...
EUVD-2026-70856
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...
CVE-2004-2549
CVE-2004-2549 Nortel ワイヤレス LAN アクセスポイント 2200 シリーズ - サービス拒否 Exploit-db 公開ページ: https://www.exploit-db.com/exploits/23786/ 著者 Alex Hernandez（別名 @alt3kx ）...
CVE-2026-72807
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x67c-8pwr-m8g3 2026-09-04 07:31:42+00:00| seen| https://gist.github.com/alon710/428fa3e523bd4efb06d0f15759388e47...
CVE-2026-72806
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-6mcf-g667-w3qv 2026-09-04 06:33:11+00:00| seen| https://gist.github.com/alon710/fbf800eaf7af09313d5329c1498b751c...
CVE-2026-72804
creationtimestamp| type| source ---|---|--- 2026-09-04 00:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-vpjw-wf5h-cgpq 2026-09-04 04:32:14+00:00| seen| https://gist.github.com/alon710/8322b53a1d7bba7f1109796c874a5f4c...
CVE-2026-78071
creationtimestamp| type| source ---|---|--- 2026-09-03 22:00:09+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4 2026-09-04 00:00:11+00:00| published-proof-of-concept| Telegram/YUSQnHRGPoy1hnFlMACvlxl4ArBdfPL6N2OZrh3RVUvk4...
CVE-2016-0801
creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:04+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors 2026-09-04 00:00:57+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors...
CVE-2021-46702
creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:04+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors 2026-09-04 00:00:57+00:00| published-proof-of-concept| Telegram/wM44PB7rs9NaMNX9ZEY8ERYf0GtNF8Am5ZddqV3Wors...
CVE-2026-9335
creationtimestamp| type| source ---|---|--- 2026-09-03 08:00:03+00:00| published-proof-of-concept| Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7VeZEaNBPjsU4IDgEWKiqQ 2026-09-04 00:00:55+00:00| published-proof-of-concept| Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7VeZEaNBPjsU4IDgEWKiqQ...
EUVD-2026-70279
A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor...
SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content
Summary Siyuan's block search endpoint concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes. Through Siyuan's publish service, an unauthenticated visitor is forwarded to the kernel with a reader-role token and can reach POST /api/search/fullTextSearchBloc...
CVE-2024-4253
creationtimestamp| type| source ---|---|--- 2026-09-02 14:00:04+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik 2026-09-03 00:00:46+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik...
CVE-2026-31321
creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...
CVE-2026-36130
creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...
EUVD-2026-69699
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...