Letta Letta 0.7.12 - Remote Code Execution

Letta 0.7.12 is vulnerable to remote code execution via POST /v1/tools/run in letta.server.restapi.routers.v1.tools.runtoolfromsource, allowing attackers to execute arbitrary Python and OS commands via crafted tool source code. id: CVE-2025-51482 info: name: Letta Letta 0.7.12 - Remote Code...

CodiMD <2.5.4 - Insecure Filename Randomization

CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorised access to uploaded image data. Due to the insecure random filename generation in the underlying Formidable library, an...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...

DbGate - Remote Code Execution via Dynamic Import Bypass

DbGate versions = 7.1.8 are vulnerable to authenticated remote code execution via the POST /runners/load-reader endpoint. The functionName parameter is directly interpolated into a JavaScript code template without sanitization. The require=null mitigation is bypassed via dynamic import. id:...

CVE-2023-35671

記事はこちらに移動しました: https://mrtiz.github.io/CVE-2023-35671...

CVE-2024-25600

CVE-2024-25600...

CVE-2019-15707

CVE-2019-15707 エクスプロイト...

CVE-2025-55182

🛡️ CVE-2025-55182 - 脆弱性の理解と緩和 🚀 はじめに CVE-2025-55182 プロジェクトへようこそ。このガイドでは、この脆弱性について理解し、必要なソフトウェアをダウンロードして実行する手順を説明します。 📥 アプリケーションのダウンロード 🔍 CVE-2025-55182 とは? CVE-2025-55182 は、リモートコード実行 RCE...

xstream-CVE-2021-29505

xstream-CVE-2021-29505...

CVE-2023-23397

このリポジトリには README がありません。...

CVE-2023-3450

CVE-2023-3450...

CVE-2023-28588_Singlefile

このリポジトリには README がありません。...

CVE-2016-0801

CVE-2016-0801...

CVE-2019-14287

CVE-2019-14287...

promptmap

O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for custom LLM...

CVE-2022-23773-repro-target

CVE-2022-23773-repro-target...

CVE-2016-6663

このリポジトリには README がありません。...

CVE-2008-1611

このリポジトリには README がありません。...

CVE-2023-6710

CVE-2023-6710 利用概念验证 PoC 深入探索 CVE-2023-6710，我们提供了全面的概念验证 PoC。此 CVE 被识别为潜在安全漏洞，经过细致审查，以演示其影响并提供对相关风险的实践理解。 安装 git clone https://github.com/DedSec-47/CVE-2023-6710.git cd CVE-2023-6710 sudo pip install -r requirements.txt 用法 python CVE-2023-6710.py -t https://www.example.com -u /cluster-manager...