109322 matches found
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Platypus.js tooling platform, related to deficiencies in the authentication process, allows a violator to execute arbitrary commands.
The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.
The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...
CVE-2026-89531
A flaw was found in the Linux kernel's svcrdma module. A remote attacker can exploit this vulnerability by repeatedly attempting connections when the system is under memory pressure. This can lead to a resource leak of rdmacmid objects, which, if amplified, could result in a Denial of Service DoS...
CVE-2026-89683
A flaw was found in the Linux kernel's nfsd NFS daemon. A remote attacker could exploit this vulnerability by sending a specially crafted NFSv3 filehandle targeting a V4ROOT export's file system identifier fsid. This action triggers a dentry reference leak, which can lead to resource exhaustion a...
CVE-2026-89680
A flaw was found in the Linux kernel's nfsd component. This vulnerability occurs when an inter-server COPY operation fails during its setup phase, leading to improper resource cleanup. Consequently, each failed operation results in a memory leak, consuming system resources. A remote attacker coul...
CVE-2026-89526
A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...
CVE-2026-89685
A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A clock domain mismatch in the clientsstillreclaiming function allows a remote attacker to indefinitely hold the server in a grace period. By sending specific CLAIMPREVIOUS OPEN requests, an attacker can block all...
CVE-2026-80986
A flaw was found in the Linux kernel's SMC-Rv2 network component. A remote attacker could exploit this vulnerability by sending a specially crafted message during an SMC-Rv2 link addition. This can lead to a slab-out-of-bounds write, potentially causing a system crash and resulting in a denial of...
CVE-2026-89678
A flaw was found in the Linux kernel's Network File System NFS daemon nfsd component. The nfsddirectwrite function, responsible for handling direct writes, incorrectly detects partial writes. This issue occurs because the logic for detecting short writes compares the actual bytes written against ...
CVE-2026-45763
A flaw was found in Suricata. When Lua rule execution is enabled, a remote attacker could exploit certain Lua allocation patterns to bypass the intended memory limits. This could lead to the Suricata engine consuming excessive memory, resulting in a Denial of Service DoS condition...
CVE-2026-89684
A flaw was found in the Linux kernel's nfsd component. A remote attacker, by sending a specially crafted OFFLOADCANCEL request, could exploit a race condition during the initialization of copy state notifications. This could lead to a denial of service DoS by causing the server to crash...
CVE-2002-0348
CVE-2002-0348 Cobalt RAQ 4 中的 service.cgi 允许远程攻击者造成拒绝服务 Packetstorm 发布地址：https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 发布地址：https://www.securityfocus.com/bid/4209 作者 Alex Hernandez，又名 @alt3kx 厂商回应： 已通知厂商 曾发布至列表的安全 cobalt： [email protected] &...
CVE-2025-22963
Descripción general Vulnerabilidad de falsificación de petición en sitios cruzados CSRF en versiones de Teedy = v1.11 permite a atacantes remotos forzar a un usuario final a cambiar su información de usuario nombre de usuario, contraseña, etc... en la aplicación web en la que está autenticado...
CVE-2025-29306
POC - CVE-2025-29306 FOXCMS /images/index.html 代码执行漏洞 概述 FoxCMS v.1.2.5 中存在一个问题，允许远程攻击者通过 index.html 组件中的案例展示页面执行任意代码。 完整 POC 阅读相关详情 — CVE-2025-29306 免责声明 ：此概念验证（POC）仅用于教育和道德测试目的。未经事先双方同意，使用此工具攻击目标属违法行为。最终用户有责任遵守所有适用的当地、州和联邦法律。开发人员不承担任何责任，也不对由本程序引起的任何误用或损害负责。 开始使用 查找目标 要查找潜在目标，请使用 Fofa（类似于...