12201 matches found
CVE-2024-12849
CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - 缺少授权导致未认证的任意文件读取 描述 WordPress 的 Error Log Viewer By WP Guru 插件在 1.0.1.3 及之前的所有版本中，通过 wpajaxnoprivelvwplogdownload AJAX 操作存在任意文件读取漏洞。这使得未认证的攻击者能够读取服务器上任意文件的内容，其中可能包含敏感信息。 详情 类型 : 插件 Slug : error-log-viewer-wp 受影响版本 : 1.0.1.3 CVSS 分数 : 7.5 CVSS...
lapith
Lapith Lapith 是一款 Python GUI 工具，以对渗透测试人员更有用的格式呈现 Nessus 结果。结果可以按问题而不是按主机查看。因此，报告受某个问题影响的所有主机比报告影响主机的所有问题更容易。 可以打开并单独查看多个结果文件。然后可以将所有打开的文件合并到单个报告中，从而更轻松地报告多次扫描的结果。 可以将结果文件拖放到左侧树形窗格中以打开它们。通过在树视图中右键单击相应项目，可以将各个评级级别保存为文本文件。 支持多种导出选项：CSV、XML 和 restructured text。如果插件的结果在不同主机之间有所不同，则会出现一个单独的选项卡，显示 diff...
ncccodenavi
ncccodenavi NCC Code Navi，面向代码审查者的文本查看器与搜索器 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 开发者：Ollie Whitehouse，ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi 基于 AGPL 发布，更多信息请参阅 LICENSE Documentation...
burp-jq
Burp JQ 这是应用于 HTTP 消息查看器中 jq 查询的 Burp 扩展， 用于处理 JSON 内容。 构建 $ gradle fatJar 致谢 Burp JQ 依赖 jackson-jq，它是 jq 的 Java 实现。 jq jackson jackson-jq...
CVE-2026-70650
In GetSimple CMS CE versions 3.3.22 and prior , an authenticated stored Cross-Site Scripting (XSS) vulnerability exists in the page backup viewer (admin/backup-edit.php ). While page fields are correctly HTML-encoded during the save process, the backup viewer utilizes htmldecode() or strip_decode...
CVE-2026-70650 GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content
GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scripting XSS vulnerability exists in the page backup viewer admin/backup-edit.php. Page fields are correctly HTML-encoded...
CVE-2026-25940
PoC de CVE-2026-25940 para jsPDF Una prueba de concepto para CVE-2026-25940 que demuestra cómo apariencias de botones de radio AcroForm especialmente diseñadas pueden desencadenar JavaScript incrustado en visores de PDF vulnerables p. ej., Foxit. El repositorio incluye un generador basado en Node...
CVE-2026-96659
A flaw in Foreman allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. This vulnerability can expose sensitive data, including host root passwords . Additionally, if Safemode protections a...
CVE-2026-96659 Foreman: excessive permissions for viewer role on preview
A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root...
WinBypass
Windows UAC 绕过 | 权限提升 Slui 文件处理器劫持 LPE - Windows 8-10 SluiHijackBypass.ps1 通过 FodHelper 绕过 UAC - Windows 10 FodhelperBypass.ps1 通过事件查看器绕过 UAC - Windows 7 EventVwrBypass.ps1 Metasploit-Framework 模块 bypassuacsluihijack.rb 复制到/.msf4/modules/exploits/windows/local/ 已合并到官方仓库 Shell 升级 要将 x86 meterprete...
document-viewer-link-handler-security-assessment
CVE-2026-46529 - Atril Evince XReader PDF 可点击链接远程代码执行 顾问式网络安全报告 针对文档查看器链接处理程序风险的专业漏洞评估报告，包括影响分析、修复和缓解策略。 📍 报告概览 字段| 详情 ---|--- 报告类型| 漏洞评估报告 参与背景| 安全研究 主要关注点| 应用程序安全 目标读者| 安全团队、工程团队、招聘经理 输出风格| 执行摘要、技术分析、业务影响、修复路线图 发布状态| 已脱敏，供公开作品集审查 !IMPORTANT 本报告已故意脱敏，以在 GitHub...
CVE-2024-10629
🛠️ GPX Viewer 漏洞利用 CVE-2024-10629 该仓库包含针对 WordPress 的 GPX Viewer 插件的概念验证漏洞利用代码，该插件存在任意文件创建漏洞（CVE-2024-10629）。该漏洞允许具有订阅者级别及以上访问权限的已认证攻击者在受影响站点的服务器上创建任意文件，从而可能导致远程代码执行。 📝 CVE 详情 CVE ID : CVE-2024-10629 发布日期 : 2024-11-13 更新日期 : 2024-11-13 受影响插件 : GPX Viewer -un -p 将 、 和 替换为相应的值。 示例 python...
BugHub
BugHub este es mi CVEhub Puedes obtener información sobre estos CVE viendo el pdf y las imágenes del proyecto...
bom-view
BOM View 一个简单的静态Web应用程序，用于显示来自软件物料清单（SBOM）文件的软件依赖项。由于是静态站点，可以轻松托管在任何静态Web托管服务上，例如GitLab Pages、GitHub Pages或Netlify。 功能 SBOM查看器 ：以清晰、可搜索的表格显示CycloneDX/SPDX JSON SBOM中的组件。 动态加载 ：无需重建站点即可添加和显示SBOM。 按需漏洞扫描 ：使用osv.dev数据库扫描单个包或整个SBOM的已知漏洞。此外，BOM View还可以显示由Grype或Trivy等工具生成的CycloneDX SBOM中已包含（“内置”）的漏洞。...
CVE-2026-70650: Improper Neutralization of Input During Web Page Generation
GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scripting XSS vulnerability exists in the page backup viewer admin/backup-edit.php. Page fields are correctly HTML-encoded...
CVE-2026-102090
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-102090 Kiteworks Core content injection
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-102090 Kiteworks Core content injection
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficiently validated, allowing an attacker-controlled document to be loaded and displayed under the trust of the legitimate application domain. This could increase the credibility of...
CVE-2026-102090
Kiteworks Core versions prior to 9.5.1 are vulnerable to a Content Injection flaw. The root cause is insufficient validation of a URL parameter within the PDF viewer , which allows an attacker to load and display a document under the trust of the legitimate application domain. This vulnerability ...
