Poison-HTB-Report

Poison-HTB-报告 使用 PwnKit CVE-2021-4034 在 HTB "Poison" 上进行权限提升 HTB "Poison" - 权限提升报告 BugVex 此仓库包含关于 Hack The Box 机器 Poison 的完整漏洞报告。 🔍 漏洞利用摘要 CVE: CVE-2021-4034 PwnKit 技术: 通过环境变量操作进行权限提升 影响: 从非特权用户获得 root shell 使用的工具: Nmap, Gobuster, LinPEAS, GCC, Burp Suite, GDB 🧠 备注 此报告是我的漏洞赏金和渗透测试档案的一部分。 由 BugVex...

CVE-2026-71470

A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, specifically a Custom Resource CR editor, to manipulate Search CR fields such as imageOverride, arguments, and environment variables without proper validation. By exploiting this, an attacker can mount...

CVE-2026-73601 Flowise before 3.1.3 Remote Code Execution via Custom MCP

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOMMCPPROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS and...

CVE-2026-73601

Flowise

CVE-2026-5668

A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown part of the file /admin/Add%20notice/add%20notice.php. This manipulation of the argument $SERVER'PHPSELF' causes cross site scripting. It is possible to initiate th...

CVE-2025-13004

Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables.This issue affects E-Commerce Package: through 27112025...

CVE-2024-41956

Soft Serve is a self-hostable Git server for the command line. Prior to 0.7.5, it is possible for a user who can commit files to a repository hosted by Soft Serve to execute arbitrary code via environment manipulation and Git. The issue is that Soft Serve passes all environment variables given by...

phppgadmin contains an incorrect access control vulnerability

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized manipulation of session variables by accepting user-controlled parameters 'subject', 'server', 'database', 'queryid' without proper validation or access...

CVE-2025-10929 Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2...

EUVD-2006-0486

Malware in sbrugna...

EUVD-1999-0073

Malware in sbrugna...

EUVD-2002-1996

Malware in sbrugna...

EUVD-2003-0332

Malware in sbrugna...

EUVD-2006-3792

Malware in sbrugna...

CVE-2025-11332

A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHPSELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been public...

EUVD-2024-21978

Malicious code in bioql PyPI...

EUVD-2023-34966

Malicious code in bioql PyPI...

EUVD-2023-38294

Malicious code in bioql PyPI...

EUVD-2022-44892

Malicious code in bioql PyPI...

CVE-2025-8532

Authorization Bypass Through User-Controlled Key, CWE - 862 - Missing Authorization, – Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows – Exploitation of Trusted Identifiers, – Exploitation of Authorization, – Variable...