linux-4.19.72_CVE-2022-29581

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2022-23773-repro

CVE-2022-23773-repro...

CVE-2019-15107

CVE-2019-15107...

CVE-2025-32013

CVE-2025-32013 CVE-2025-32013 的安全公告与 PoC 使用方法 1. 从这里开始： 阅读本 README 文件，了解仓库结构与内容概览。 2. 内部安全公告： 打开 01SecurityAdvisory.md 查看针对该漏洞、其影响及修复计划的详细报告。 3. PoC 说明： 打开 02ProofofConcept.md 审查用于识别和利用该漏洞的自动化策略。 4. 图表： 下图提供了数据流与路径的快速可视化摘要： 03CommunicationFlowDiagram.jpg...

CVE-2024-55875

CVE-2024-55875 CVE-2024-55875/GHSA-7mj5-hjjj-8rgw/http4k 第一个 CVE POC - https://github.com/http4k/http4k/security/advisories/GHSA-7mj5-hjjj-8rgw...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 Esta vulnerabilidad ha sido reemplazada por CVE-2013-0333. Consulte https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo para más detalles. Un reemplazo para este script, que cubre CVE-2013-0333, se puede encontrar en...

CVE-2018-16858

CVE-2018-16858...

CVE-2023-22527

...

GHSA-J4FX-XXWH-2485 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

GHSA-78XM-G482-CH2R vulnerabilities

Vulnerabilities for packages: elasticsearch...

GHSA-CPH5-M8F7-6C5X vulnerabilities

Vulnerabilities for packages: arangodb...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

FOG Project < 1.5.10.34 - Remote Command Execution

FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. id: CVE-2024-39914 info: name: FOG Project 1.5.10.34 - Remote...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

JumpServer - Open Redirect via Referer Header

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.19 and v4.10.5, The /core/i18n// endpoint uses the Referer header as the redirection target without proper validation, which could lead to an Open Redirect vulnerability. id:...

QNAP Music Station < 5.4.0 - Authentication Bypass

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...

XWiki Platform - Path Traversal

XWiki Platform 4.2-milestone-2 through 16.10.6 contains a path traversal caused by improper access control in jsx and sx endpoints, letting remote attackers read configuration files, exploit requires no special privileges. id: CVE-2025-55748 info: name: XWiki Platform - Path Traversal author:...

FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass

FUXA v1.2.7 contains a hardcoded credentials vulnerability caused by use of a hard-coded secret key in server/api/jwt-helper.js, letting remote attackers forge admin tokens and bypass authentication, exploit requires no special conditions. id: CVE-2025-69971 info: name: FUXA = 1.2.7 - Hardcoded J...

Java-springboot-codebase 1.1 - Arbitrary File Read

OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code snippets, applications, and projects. Prior to commit c835c6f7799eacada4c0fc77e0816f250af01ad2, insufficient path traversal mechanisms make absolute path traversal possible. This vulnerability allows unauthorized...

Yii 2 < 2.0.38 - Remote Code Execution

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. id: CVE-2020-15148 info: name: Yii 2 2.0.38 - Remote Code Execution author: pikpikcu severity: critical description: Yii 2 yiisoft/yii2 before version 2.0....