cve-2020-7247

cve-2020-7247 익스플로잇 제목: OpenSMTPD 6.6.2 - 원격 코드 실행. 새 날짜: 2020-01-29. 익스플로잇 작성자: 1F98D. 원본 작성자: Qualys Security Advisory. 공급업체 홈페이지: https://www.opensmtpd.org/. 소프트웨어 링크: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1. 버전: OpenSMTPD 6.6.2. 테스트 환경: OpenBSD 6.6, OpenBSD 6.5, OpenBSD 6....

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress 플러그인 - 튜토리얼 CalderaForm은 드래그 앤 드롭으로 쉽게 양식을 만들 수 있는 WordPress 플러그인입니다. 최근 활동 중 일부 포털을 테스트할 기회가 있었는데, 그중 하나에는 이 플러그인으로 만든 문의 양식이 있었습니다. 대상 인스턴스의 사용자 지정 구성 덕분에 취약점을 발견할 수 있었습니다. 그 취약점은 단순하고 매뉴얼에 가까운 성격이라 초보자에게 몇 가지 메커니즘을 설명하기 좋은 예라고 생각합니다. 오로지 교육 목적으로...

bigdecimal-segfault-fix

h1. Исправление segfault в BigDecimal В библиотеке BigDecimal Ruby существует ошибка segfault, которая может быть вызвана пользователем при передаче заведомо некорректных значений. Если вы хотите проверить, защищено ли ваше приложение, запустите +example.rb+. Этот скрипт должен завершиться...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

Push Notification for Post and BuddyPress <= 1.93 - SQL Injection

Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to SQL Injection via the 'onesignalexternalid' and 'onesignalgetsubscriptionoptionsid' paramters in all versions up to, and including, 1.93 due to insufficient escaping on the user supplied parameter and lack of sufficie...

WordPress AnyComment <0.3.5 - Open Redirect

WordPress AnyComment plugin before 0.3.5 contains an open redirect vulnerability via an API endpoint which passes user input via the redirect parameter to the wpredirect function without being validated. An attacker can redirect a user to a malicious site and possibly obtain sensitive information...

IBAX - SQL Injection

IBAX go-ibax functionality is susceptible to SQL injection via the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to SQL injection, and the attack may be launched remotely. An attacker can potentially obtain sensitive information, modify data, and/or execute...

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content. id: CVE-2022-42096 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...

Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

GamiPress <= 2.8.9 - SQL Injection

GamiPress WordPress plugin version 2.8.9 and below suffers from an SQL injection vulnerability due to insufficient sanitization of user input, allowing attackers to execute arbitrary SQL commands. id: CVE-2024-13496 info: name: GamiPress = 2.8.9 - SQL Injection author: ritikchaddha severity: high...

CVE-2014-0472

CVE-2014-0472 사용 root@kitploit: docker-compose up -d localhost:8083에 접속하세요. 참고: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. 사용자 입력일반적으로 작업 완료 후 리디렉션할 위치를 나타내는 쿼리스트링의 "next" 매개변수을 기반으로 URL을 구성하는 하나 이상의 뷰가 존재합니다. 2. 공격자가 서버의 Python 임포트 경로에 존재하는 것으로 알려진 하나 이상의 모듈이 있으며, 이 모듈은 임포트 시...

CVE-2019-1698

TRAN CONG DANH - SVTT - 멘토: LUU VAN LAN - CVE-2019-1698 - 시작일: 30/07/2024 취약점이 있는 버전과 취약점을 수정한 코드 버전 간의 diff 코드를 확인하세요: 코드 참조 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php 코드 참조 2:...

rConfig 3.9.4 - Cross-Site Scripting

rConfig 3.9.4 is vulnerable to reflected XSS. The configDevice.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in the rid GET parameter of devicemgmnt.php id: CVE-2020-12259 info: name: rConfig 3.9.4 - Cross-Site Scripting...

Log4j_Vulnerability_Demo

Log4jVulnerabilityDemo Log4j の脆弱性（CVE-2021-44228）がどのように悪用されるかを示すシンプルなプログラムです。 デモの実行方法 : プログラムを起動するには、UNIX システムでは start.sh を、Windows では start.bat を実行するだけです。 ユーザー入力は読み取られ、Log4j フレームワークを使用してコンソールにログ出力されます。 デフォルトでは、Log4j ライブラリによって生成されるログメッセージは、JNDI 置換に対してサーバー到達不能 /...

CVE-2025-50565

CVE-2025-50565 説明 Doubo ERP 1.0 には、ユーザー入力のフィルタリングが不足していることによるSQLインジェクションの脆弱性があり、攻撃者によりリモートから悪用される可能性があります。 脆弱性タイプ SQLインジェクション 攻撃タイプ リモート 影響情報開示 true ベンダー確認済み true 発見者 https://www.jump.net.cn 参考文献 https://www.jump.net.cn https://v12.icu 影響を受ける製品コードベース Doubo ERP 1.0...

DRUPAL-CONTRIB-2026-146

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently sanitize user-supplied data before displaying it in generated HTML leading to a cross-site scripting...