109322 matches found
F-logic DataCube3 - SQL Injection
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...
CVE-2024-42658
CVE-2024-42658 CVE-2024-42658 wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 中的一个问题允许远程攻击者通过cookie参数获取敏感信息 CVE-2024-42658: 摘要：wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 中存在一个漏洞，允许未经身份验证的远程攻击者通过操纵cookie获取敏感信息。该问题源于对cookie的安全措施不足，导致敏感信息潜在泄露和未授权访问。 详情：wishnet Nepstech Wifi Router...
blmvuln
PrestaShopウェブサイトの重大なセキュリティ脆弱性を修正 :rocket: CVE-2022-31101 検出兼修正ツール！ 新たに発見された脆弱性により、リモート攻撃者があなたのショップを乗っ取る可能性があります 脆弱性の詳細はこちらでお読みください： https://build.prestashop.com/news/major-security-vulnerability-on-prestashop-websites/...
EUVD-2026-75790
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-site request forgery...
EUVD-2026-75784
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...
EUVD-2026-75779
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-supplied URLs...
EUVD-2026-75794
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-75798
IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...
EUVD-2026-75803
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to incorrect authorization...
EUVD-2026-75793
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control...
EUVD-2026-75877
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain due to improper validation of the HTTP Host header...
EUVD-2026-76189
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...
EUVD-2026-76701
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.class.php...
CVE-2020-8958
Pythonで書かれたCVE-2020-8958の概念実証です。このスクリプトは、成功すると/etc/passwdの内容を返します。 CVE-2020-8958 Guangzhou 1GE ONU V2801RW 1.9.1-181203から2.9.0-181024まで、およびV2804RGW 1.9.1-181203から2.9.0-181024までのデバイスでは、boaform/admin/formPingの宛先IPアドレスフィールドにシェルのメタ文字を入力することで、リモートの攻撃者が任意のOSコマンドを実行できます。 必要条件 Python 3.X bs4 使い方 python...
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
A flaw was found in Apache Commons Configuration. When processing an untrusted configuration file, a remote attacker could provide specially crafted YAML input with cycles. This could lead to an uncontrolled recursion, causing a StackOverflowError and resulting in a Denial of Service DoS for the...
micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests
A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...
jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously...
