CVE-2024-12986

CVE-2024-12986 扫描器与漏洞利用工具 本仓库包含针对 CVE-2024-12986 漏洞的扫描器与漏洞利用工具。该漏洞是 DrayTek 网关设备 apmcfgupptim 端点中的一个命令注入漏洞 。攻击者可利用该漏洞在受影响设备上执行任意命令，可能导致系统完全沦陷。 漏洞概述 该漏洞存在于 DrayTek 网关设备的 apmcfgupptim 端点中。通过构造恶意 HTTP 请求，攻击者可以向 session 参数注入任意命令，从而在目标设备上实现命令执行。 更多详情，请参阅原始披露： Command Injection in apmcfgupptim endpoint...

Authentication Bypass by Primary Weakness

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the ProtocolResponse.url when a custom protocol handler omits the session...

EUVD-2026-40995

We found a chain of combining multiple weaknesses in the product that could allow an attacker to become any user in the backend and access any data: The payment integration plugins Stripe included in the core system, pretix-mollie, pretix-oppwa, pretix-bitpay, pretix-payone, pretix-secuconnect,...

CVE-2026-35903

MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, the device does not verify the Digest response parameter in subsequent RTSP requests within the sa...

CVE-2026-35903

MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, the device does not verify the Digest response parameter in subsequent RTSP requests within the sa...

CVE-2025-52563

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability due to insufficient sanitization of the page parameter in the session/adduserstosession.php endpoint. This issue has been patched in version 1.11.30...

PT-2026-22620

Chamilo is a learning management system. Prior to version 1.11.30, there is a reflected cross-site scripting XSS vulnerability due to insufficient sanitization of the page parameter in the session/add users to session.php endpoint. This issue has been patched in version 1.11.30...

PT-2026-5308

Name of the Vulnerable Software and Affected Versions Bdtask SalesERP versions prior to 20260116 Description A security issue exists in Bdtask SalesERP related to improper authorization. The issue affects processing within the Administrative Endpoint component. Manipulation of the ci session...

OpenCode USSD Gateway 安全漏洞

OpenCode USSD Gateway is an OpenCode open source gateway software for processing and managing USSD messages. A security vulnerability exists in OpenCode USSD Gateway that originates from an SQL injection in the Session ID parameter in /occontrolpanel/index.php...

EUVD-2006-5018

Malware in sbrugna...

EUVD-2017-0216

Malware in sbrugna...

EUVD-2010-2154

Malware in sbrugna...

EUVD-2020-0108

Malware in sbrugna...

EUVD-2013-6001

Malware in sbrugna...

EUVD-2003-1198

Malware in sbrugna...

EUVD-2010-4975

Malware in sbrugna...

EUVD-2007-6159

Malware in sbrugna...

EUVD-2025-25474

Malicious code in bioql PyPI...

EUVD-2023-37307

Malicious code in bioql PyPI...

Open Redirect

Overview googlesignin is a Sign in or up with Google for Rails applications Affected versions of this package are vulnerable to Open Redirect via the proceedto value in the session store when it is set to a protocol-relative URL. An attacker can redirect users to an unintended origin by submittin...