166 matches found
ElasticSearch-CVE-2014-3120
ElasticSearch 검색 원격 코드 실행 CVE-2014-3120 CVE-2014-3120를 악용하기 위한 POC 코드 요구 사항: python 사용법: python elasticcheck.py 예시: root@kitploit: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 취약함 1 10.0.0.11:9201 취약하지 않음 2 10.0.0.12:9201 연결 오류 취약한 호스트: 1 취약하지 않은 호스트: 1 연결 오류: 1 hostport.txt:...
CVE-2020-18324
Subrion CMS 4.2.1 – Kickstart टेम्पलेट में परावर्तित XSS भेद्यता विवरण Subrion CMS स्थापित करना आसान है और प्रबंधित करना सरल है। इसका उपयोग एक स्वतंत्र अनुप्रयोग के रूप में या अन्य अनुप्रयोगों के साथ मिलकर छोटी, मध्यम या बड़ी साइटें बनाने के लिए करें। परावर्तित क्रॉस-साइट स्क्रिप्टिंग भेद्यता...
CVE-2026-78937
Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-78937
A use after free vulnerability in the Search component of Google Chrome for Android (versions prior to 152.0.7977.65 ) allowed a remote attacker, leveraging social engineering , to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rated this Medium severity....
CVE-2026-71056
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Search. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2026-60757
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Search. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Siebel...
PT-2026-77378
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM End User versions 17.0 through 26.6 Description A flaw exists in the Search component of the Oracle Siebel CRM End User product. An unauthenticated attacker with access to the physical communication segment attached to the...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
EUVD-2026-52554
A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...
CVE-2026-18719 cemtan sar2html Search sar2html.py sql injection
A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...
CVE-2026-50679
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-50373
Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Search Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-58499
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. This issue enables a low-privile...
CVE-2026-10721
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7 f...
CVE-2026-10721
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...
EUVD-2026-35994
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...
CVE-2026-10721 Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...
CVE-2026-10721 Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components
Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize calls in the in Permission, Cache, and Search components. An unauthenticated attacker may trigger arbitrary PHP object instantiation if a malicious serialized payload has been placed in the database. Thanks XananasX7...