CVE-2014-0472

CVE-2014-0472 Usa root@kitploit: docker-compose up -d Accede a localhost:8083 Referencia: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. Una o más vistas están presentes que construyen una URL basada en la entrada del usuario comúnmente, un parámetro "next" en una cadena de consult...

Push Notification for Post and BuddyPress <= 1.93 - SQL Injection

Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to SQL Injection via the 'onesignalexternalid' and 'onesignalgetsubscriptionoptionsid' paramters in all versions up to, and including, 1.93 due to insufficient escaping on the user supplied parameter and lack of sufficie...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

WordPress AnyComment <0.3.5 - Open Redirect

WordPress AnyComment plugin before 0.3.5 contains an open redirect vulnerability via an API endpoint which passes user input via the redirect parameter to the wpredirect function without being validated. An attacker can redirect a user to a malicious site and possibly obtain sensitive information...

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content. id: CVE-2022-42096 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...

IBAX - SQL Injection

IBAX go-ibax functionality is susceptible to SQL injection via the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to SQL injection, and the attack may be launched remotely. An attacker can potentially obtain sensitive information, modify data, and/or execute...

Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

GamiPress <= 2.8.9 - SQL Injection

GamiPress WordPress plugin version 2.8.9 and below suffers from an SQL injection vulnerability due to insufficient sanitization of user input, allowing attackers to execute arbitrary SQL commands. id: CVE-2024-13496 info: name: GamiPress = 2.8.9 - SQL Injection author: ritikchaddha severity: high...

Log4j_Vulnerability_Demo

Log4jVulnerabilityDemo Un programa sencillo para demostrar cómo se puede explotar la vulnerabilidad de Log4j CVE-2021-44228 Ejecutar la demo : Para iniciar el programa, simplemente ejecute start.sh en sistemas UNIX o start.bat en Windows. La entrada del usuario se leerá y se registrará en la...

CVE-2020-5398

CVE-2020-5398 - Attaque RFD Reflected File Download pour Spring MVC Dans Spring Framework, versions 5.2.x antérieures à 5.2.3, versions 5.1.x antérieures à 5.1.13, et versions 5.0.x antérieures à 5.0.16, une application est vulnérable à une attaque de téléchargement de fichier réfléchi RFD...

CVE-2025-50565

CVE-2025-50565 Descrizione Doubo ERP 1.0 presenta una vulnerabilità di SQL injection dovuta alla mancanza di filtraggio dell'input utente, che può essere sfruttata da remoto da un attaccante. Tipo di vulnerabilità SQL Injection Tipo di attacco Remoto Impatto divulgazione di informazioni true Vend...

CVE-2019-1698

TRAN CONG DANH - SVTT - मेंटर: LUU VAN LAN - CVE-2019-1698 - प्रारंभ दिन: 30/07/2024 भेद्यता वाले संस्करण और भेद्यता के फिक्स वाले कोड संस्करण के बीच diff कोड देखें: कोड संदर्भ 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php कोड संदर्भ ...

bigdecimal-segfault-fix

h1. Correzione del segfault di BigDecimal C'è un bug di segfault nella libreria big decimal di ruby che può essere innescato da utenti che forniscono valori notoriamente non validi. Se desideri verificare se la tua applicazione è sicura, esegui +example.rb+. Questo script dovrebbe terminare...

CVE-2024-3400

CVE-2024-3400: Vulnerabilità di Iniezione di Comandi OS Descrizione: CVE-2024-3400 è una vulnerabilità di sicurezza che interessa applicazioni o servizi che accettano input dall'utente ed eseguono comandi del sistema operativo basati su tale input senza una validazione adeguata. Questa...

cve-2020-7247

cve-2020-7247 Titolo exploit: OpenSMTPD 6.6.2 - Esecuzione di codice remoto. La nuova data: 2020-01-29. Autore exploit: 1F98D. Autore originale: Qualys Security Advisory. Homepage del fornitore: https://www.opensmtpd.org/. Link del software:...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm è un plugin per WordPress che permette di creare facilmente dei form tramite drag and drop. Durante una recente attività mi è capitato di testare alcuni portali, uno dei quali ospitava proprio un form di contatti creat...