CVE-2021-21017

CVE-2021-21017 またしてもAdobe Readerのバイトオーダーマークの問題 : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 &&...

CVE-2026-48710

CVE-2026-48710 Principio: Starlette è un framework ASGI Python open-source e leggero Il problema nasce dal fatto che, nella gestione della struttura dati dell'url, il framework Starlette si fida dell'host inviato dal client, concatenandolo direttamente alla variabile url per la successiva...

CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider

WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgidav/samples/mysqldavprovider.py concatenates the record key parsed from a request URL directly into SQL WHERE clauses. The affected existsrecordbyprimarykey, getfieldbyprimaryke...

CVE-2021-21017

CVE-2021-21017 Non è un altro bug del Byte Order Mark di Adobe Reader : root@kitploit: Plugin IA32, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if...

CVE-2025-61524

An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly...

CVE-2025-61524

An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly...

CVE-2022-45429

Some Dahua software products have a vulnerability of server-side request forgery SSRF. An Attacker can access internal resources by concatenating links URL that conform to specific rules...

CVE-2018-10799

The affected software is Brave (pre-0.14.0, e.g., on Linux). The issue arises from mishandling a long URL formed via window.location+= '?\u202a\uFEFF\u202b'; in a SCRIPT element, causing a hang/denial of service. Connected sources (Red Hat advisory, NVD entries, CNVD, etc.) confirm the same descr...