CVE-2023-42793

حول CVE-2023-42793 ستحتاج أولاً إلى الحصول على الرمز token باستخدام استغلال مختلف. ومع ذلك، سيمنحك الاستغلال التالي صلاحية تنفيذ الأوامر عن بُعد RCE على خادم Linux، حيث يقوم بتشفير الحمولة في عنوان URL وإرسالها إلى الخادم. طريقة الاستخدام root@kitploit: python3 ./main -t TEAMCITYTOKEN -u...

CVE-2026-73628

Serendipity versions = 2.3.5 and . In include/functionsrouting.inc.php serveSearch, the sanitisation pipeline runs urldecode after HTML-encoding, so a single URL-encoded HTML payload survives striptags and htmlspecialchars and is then decoded back into live HTML in the page. A crafted search link...

pyjwt 安全漏洞

PyJWT is a Python library developed by José Padilla of the United States. It allows for the encoding and decoding of JSON Web Tokens JWTs. There were security vulnerabilities in PyJWT versions 2.8.0 to 2.12.1. These vulnerabilities stemmed from the fact that when verifying separate JWS tokens tha...

CVE-2024-47769 IDURAR has a Path Traversal (unauthenticated user can read sensitive data)

IDURAR is open source ERP CRM accounting invoicing software. The vulnerability exists in the corePublicRouter.js file. Using the reference usage here, it is identified that the public endpoint is accessible to an unauthenticated user. The user's input is directly appended to the join statement...