CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

EUVD-2026-63392

Handlebars.java: Arbitrary file read in SpringTemplateLoader via URL-fragment suffix bypass...

CVE-2023-48795

OpenSSH Vulnerability Scanner for CVE-2023-48795 This Python-based tool scans systems for OpenSSH installations and checks if they are vulnerable to CVE-2023-48795 , a critical vulnerability that affects versions earlier than OpenSSH 9.6. The script provides a detailed report of the scanned...

CVE-2025-22963

Обзор Уязвимость межсайтовой подделки запроса CSRF в Teedy версиях = v1.11 позволяет удалённым злоумышленникам принудить конечного пользователя изменить свои пользовательские данные имя пользователя, пароль и т. д. в веб-приложении, в котором он в настоящее время аутентифицирован. Уязвимость...

CVE-2026-36438

CVE-2026-36438: Конфиденциальная информация через сброс пароля Версии Intelbras VIP 1230 B/D G4 до 6 позволяют удаленному злоумышленнику получить конфиденциальную информацию учетной записи администратора через функцию сброса пароля в файле OutsideCmd. Обнаружено Henrique Koji, февраль 2026. Ссылк...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...

kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

CVE-2020-18325

Intelliants Subrion CMS v4.2.1의 구성 패널에 다중 크로스 사이트 스크립팅XSS 취약점이 존재합니다. 설명 Subrion CMS는 설치가 쉽고 관리가 간단합니다. 단독 애플리케이션으로 사용하거나 다른 애플리케이션과 함께 사용하여 초급 수준 사이트, 중형 또는 대형 사이트를 만들 수 있습니다. Subrion CMS v.4.2.1 구성 패널에서 여러 반사형 크로스 사이트 스크립팅 취약점이 발견되어 원격 공격자가 임의의 JavaScript를 주입할 수 있습니다. 날짜 : 27-02-2022 소프트웨어 링크:...

CVE-2024-1304---Badgermeter-moni-tool-Reflected-Cross-Site-Scripting-XSS

CVE-2024-1304 --- Badgermeter moni tool - Отражённая межсайтовая сценарная атака XSS https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1304: 6.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | CWE-79. Ссылка на ПО :...

CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

CVE-2002-0348

CVE-2002-0348 service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus publication at https://www.securityfocus.com/bid/4209 Author Alex Hernandez aka @alt3kx Vendo...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner Удаленный злоумышленник может сконструировать специальный HTTP-запрос для захвата консоли WebLogic Server без аутентификации. Установка и использование git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner cmd...

SUSE CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

CVE-2024-32369

CVE-2024-32369 Description: SQL Injection vulnerability in HSC Cybersecurity HSC Mailinspector v.5.2.17-3 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component. Versions: Discovered in HSC Mailinspector...

CVE-2024-23742

CVE-2024-23742 Проблема в Loom до версии 0.196.1 на macOS позволяет удаленному злоумышленнику выполнить произвольный код через настройки RunAsNode и enableNodeClilnspectArguments. С помощью этого инструмента можно проверить, уязвимо ли приложение: После проверки мы можем внедрить наш код и получи...