CVE-2022-3602

Rilevamento per CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Rileva quando l'intestazione del Server HTTP indica che la versione di OpenSSL è vulnerabile a CVE-2022-3602 cioè v3.0.0 fino a v3.0.6 inclusi. Rileva tentativi di sfruttamento in TLS v1.2. Riferimenti:...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 ثغرة البرمجة النصية عبر المواقع XSS — رقم CVE المعيّن: CVE-2017-9609...

CVE-2025-29306

CVE-2025-29306 FOXCMS黔狐内容管理系统 सेवा पैरामीटर इंजेक्शन भेद्यता 1. भेद्यता का परिचय FoxCMS एक मुफ्त वाणिज्यिक और ओपन सोर्स वेबसाइट प्रबंधन प्रणाली है, जो PHP+MySQL आर्किटेक्चर का उपयोग करती है। FOXCMS黔狐内容管理系统 में सेवा पैरामीटर इंजेक्शन भेद्यता है, जिसका उपयोग करके हमलावर सर्वर नियंत्रण प्राप्त कर सक...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603 CSRF भेद्यता: नकली ग्राहक बनाने की ओर ले जाती है परियोजना का नाम और रेपो URL :https://phpgurukul.com/client-management-system-using-php-mysql/ भेद्यता का नाम : क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF प्रभावित संस्करण : V1.2 परिचय क्लाइंट मैनेजमेंट सिस्टम PHPGurukul द्वारा विकसित के ग्राह...

CVE-2026-71694

An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...

CVE-2026-8708 Genzel breadcrumbs <= 1.2 - Cross-Site Request Forgery to Settings Update via Plugin Settings Page

The Genzel breadcrumbs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation on the optionspage function. This makes it possible for unauthenticated attackers to update the plugin's breadcru...

CVE-2026-22220

A lack of proper input validation in the HTTP processing path in TP-Link Archer BE230 v1.2 web modules may allow a crafted request to cause the device’s web service to become unresponsive, resulting in a denial of service condition. A network adjacent attacker with high privileges could cause the...

CVE-2026-22221

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2vpn modules allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity...

CVE-2026-0631

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2vpn modules allows an adjacent authenticated attacker to execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration...

CVE-2026-22229 Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and Deco BE25 v1.0

A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device,...

CVE-2026-22223 Command Injection Vulnerability on TP-Link Archer BE230 v1.2

An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2vpn modules allows adjacent authenticated attacker execute arbitrary code. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity...

CVE-2026-22221

CVE-2026-22221 describes an OS Command Injection in TP-Link Archer BE230 v1.2 (vpn modules) that could allow an adjacent authenticated attacker to execute arbitrary code, potentially gaining full administrative control and compromising configuration integrity, network security, and service availa...

CVE-2020-23041

Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

EUVD-2020-17705

Malware in sbrugna...

EUVD-2024-53701

Malicious code in bioql PyPI...

cve

Insecure Direct Object Reference IDOR Vulnerability Report...

CVE-2024-57672

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module...

CVE-2024-57673

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module...

CVE-2024-57673

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module...

CVE-2024-57672

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module...