CVE-2025-22954

Koha CVE-2025-22954: SQL Injection in lateissues-export.pl Overview This repository contains a proof of concept for CVE-2025-22954, a critical severity CVSS 10.0 SQL injection vulnerability in Koha before version 24.11.02. The vulnerability exists in the GetLateOrMissingIssues function in...

Dahua Devices - Path Traversal Account Leak (CVE-2024-13130)

Multiple Dahua devices and OEMs allow path traversal to ../mtd/Config/Sha1Account1 or Account1, leaking SerialID and Password hashes. !/usr/bin/env python3 -- coding: utf-8 -- """Dahua and OEM path traversal to account config files CVE-2024-13130.""" from kittysploit import from...

Dahua Devices - Path Traversal Account Dump (CVE-2024-13130)

Exploits path traversal to ../mtd/Config/Sha1Account1 or Account1 on Dahua and OEM devices, leaking SerialID and Password hashes. !/usr/bin/env python3 -- coding: utf-8 -- """Dahua/OEM path traversal to account config CVE-2024-13130.""" from kittysploit import from lib.protocols.http.httpclient...

CVE-2025-22954: Improper Neutralization of Special Elements used in an SQL Command

GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter...

PT-2025-11081

Name of the Vulnerable Software and Affected Versions Koha versions prior to 24.11.02 Description The issue allows SQL injection in /serials/lateissues-export.pl via the supplierid or serialid parameter. This could let attackers access sensitive data, tamper with records, or wipe out databases...

CVE-2025-22954

GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter...

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

Design/Logic Flaw

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4529: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...