python-haystack

python-haystack memory forensics |travis| |coverage| |landscape| |pypi| |docs| Quick Start: Quick usage guide in the docs/ folder. Haystack-reverse CLI in the docs/ folder. More documentation Introduction: python-haystack is an heap analysis framework, focused on searching and reversing of C...

CVE-2023-45542

CVE-2023-45542 mooSocial v3.1.8 的搜索功能中的 q 参数存在一个反射型跨站脚本（XSS）漏洞，允许攻击者通过特制 URL 窃取用户的会话 Cookie 并冒充其账户。 漏洞参数：q 漏洞利用 - 概念验证 POC 反射型跨站脚本（XSS） root@kitploit: Payload : test"alert1test FINAL Payload URL encoded : test%22%3e%3cscript%3ealert1%3c%2fscript%3etest 对 http://localhost/moosocial/search/index/q=...

CVE-2024-50677

CVE-2024-50677 | OroPlatform CMS v5.1 中的两次点击反射型XSS漏洞 本仓库提供了CVE-2024-50677的概念验证 免责声明： 此代码是该漏洞的概念验证。我不会对任何使用此利用程序的行为负责。 描述： CVE-2024-50677 指的是 OroPlatform CMS v5.1 默认配置中存在的一个两次点击反射型XSS漏洞，具体演示平台可见：https://github.com/oroinc/docker-demo 该漏洞存在于应用程序对搜索功能用户输入的控制方式中。如果用户点击网页界面中包含JavaScript查询（例如）的搜索栏...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - 远程命令执行 CVE-2014-6287 🚨 关于该漏洞利用 这是一个针对 Rejetto HttpFileServer HFS v2.3.x 中已知 远程命令执行漏洞 的概念验证漏洞利用程序，漏洞编号为 CVE-2014-6287 。 通过滥用存在漏洞的搜索功能，攻击者可以注入特制载荷，在目标机器上执行任意系统命令。 📌 详情 漏洞利用名称： Rejetto HttpFileServer 2.3.x - 远程命令执行 RevShell CVE： CVE-2014-6287 作者： Z3R0 0x30 受影响版本：...

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-45542 info: name: MooSocial 3.1.8 - Cross-Site Scripting author...

CVE-2024-5961

CVE-2024-5961 2ClickPortal中的反射型XSS 版本：7.2.31 至 7.6.4。 intext:"Powered by 2ClickPortal" PoC root@kitploit: https://domain/szukaj/?searchlang=pl&search=all&string=" onfocus=alert1 autofocus="...

CVE-2026-81270

Apache Allura versions through 1.20.0 are affected by an information exposure vulnerability in its search functionality , allowing non-public data to be disclosed. The flaw is exploitable over the network with low complexity , no privileges , and no user interaction , yielding a High confidential...

CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...

CVE-2026-76212

phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character '=' in the Search/Database/Pgsql.php backend while escapeLikeWildcards escapes user input with the '|' prefix. As a result, wildcard escaping is a no-op and...

CVE-2026-56790 CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or...

HCL Digital Experience Compose 安全漏洞

HCL Digital Experience Compose is an enterprise-level content creation and digital experience management platform developed by the Indian company HCL. HCL Digital Experience Compose has a security vulnerability, which stems from a reflection-type cross-site scripting issue in the search center...

EUVD-2026-33473

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153 westboy CicadasCMS AbstractCacheManager.java search cross site scripting

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153

CVE-2026-10153 affects westboy CicadasCMS; the issue resides in the Search function of org/springframework/cache/support/AbstractCacheManager.java, where manipulation of the argument s enables cross-site scripting. Exploitation is remote and the exploit has been published. The project uses a roll...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

PT-2026-45138

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

Giskard 安全漏洞

Giskard is an open-source evaluation and testing framework for artificial intelligence systems developed by Giskard. Versions of Giskard prior to 1.0.2b1 contained security vulnerabilities. These vulnerabilities stemmed from the direct passing of user-provided regular expressions to the re.search...

VSCO 安全漏洞

VSCO is a photo and video editor developed by the VSCO company. Version VSCO 1.1.1.0 contains a security vulnerability. This vulnerability arises from the search function’s improper handling of overly long strings, which may allow local attackers to cause the application to crash by submitting...

VPN Browser+ 安全漏洞

VPN Browser+ is a mobile browser application developed by VPN Browser Company, featuring integrated virtual private network capabilities. Version 1.1.0.0 of VPN Browser+ contains a security vulnerability. This vulnerability stems from the search function’s improper handling of extremely large...