Trend_Micro_POC

TrendMicroPOC CVE-2018-3608...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107（Webmin のバックドア）のために書いたものです。...

CVE-2018-4407

このリポジトリには README がありません。...

linux-4.1.15_CVE-2022-3564

Linux カーネルリリース 4.x http://kernel.org/ これらは Linux バージョン 4 のリリースノートです。これらを注意深く読んでください。ここには、このカーネルが何であるか、インストール方法、および何か問題が発生した場合の対処法が説明されています。 Linux とは？ Linux は、Linus Torvalds がネット上の緩やかなハッカーチームの協力を得て一から書き上げた Unix オペレーティングシステムのクローンです。POSIX および Single UNIX Specification への準拠を目指しています。...

cve-2024-10220

このリポジトリには README がありません。...

HAProxy_CVE-2021-40346

HAProxyCVE-2021-40346 HAProxy CVE-2021-40346 解説 フォローはこちら Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2024-32002-hook

このリポジトリには README がありません。...

CVE-2020-3452

このリポジトリには README がありません。...

BugId

BugId アプリケーションのバグを検出、分析、一意に識別します。 概要 あなたは... アプリケーションをクラッシュさせているバグの種類を知りたいですか? バグがセキュリティ上の脆弱性である可能性があるかどうかを知りたいですか? 2つ以上のクラッシュが同じバグによって引き起こされているかどうかを知りたいですか? バグの分析を含む人間が読めるレポートが欲しいですか? ...ならば、BugIdはあなたにぴったりかもしれません! クイックセットアップ BugIdを使用するには、以下のソフトウェアをダウンロードしてインストールしてください: 最新のPython 2.7.14...

Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting

The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues. id: CVE-2017-18557 info: name: Google Maps by BestWebSoft 1.3.6 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...

myfactory FMS - Cross-Site Scripting

myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. id: CVE-2021-42565 info: name: myfactory FMS - Cross-Site Scripting author: madrobot,daffainfo severity: medium description: | myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. impact: |...

Gitea <1.16.5 - Open Redirect

Gitea before 1.16.5 is susceptible to open redirect via GitHub repository go-gitea/gitea. An attacker can redirect a user to a malicious site and potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-1058 info: name: Gitea 1.16.5 - Open Redire...

ShortCode Addons - Unauthenticated Options Update

WordPress plugin Shortcode Addons = 3.0.2 contains an unauthenticated arbitrary option update caused by insufficient access controls in the plugin, letting attackers modify options without authentication. id: CVE-2022-34487 info: name: ShortCode Addons - Unauthenticated Options Update author:...

Reprise License Manager 14.2 - Information Disclosure

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostnames, system architecture and file/directory...

OctoberCMS - Account Takeover

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Trilium <0.52.4 - Cross-Site Scripting

Trilium prior to 0.52.4, 0.53.1-beta contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. id: CVE-2022-2290 info: name: Trilium 0.52.4 - Cross-Site Scripting author:...

Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting

Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarfajax.php. id: CVE-2011-4336 info: name: Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting author: pikpikcu severity: medium description: Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site...

InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion

The InstaWP Connect - 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.1.0.85 via the 'instawp-database-manager' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files ...

phpIPAM 1.5.1 - Cross-site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1. id: CVE-2023-0676 info: name: phpIPAM 1.5.1 - Cross-site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5....