4303 matches found
CVE-2025-24016
CVE-2025-24016 Come funziona questo metodo di rilevamento? Questo template HTTP Nuclei controlla un URL di destinazione e la sua pagina /app/login per individuare l'interfaccia web di Wazuh, estrae il valore wazuhVersion con una regex e conferma che la pagina sia accessibile stato 200 e che si...
CVE-2021-41278
CVE-2021-41277 Scanner batch di Metabase per vulnerabilità di lettura file arbitrari Versioni interessate: root@kitploit: metabase version = 1.0.0, = 0.40.5 metabase version = 1.40.5 Istruzioni per l'uso root@kitploit: usage: CVE-2021-41277.py -h -u URL -f FILE CVE-2021-41277 optional arguments:...
CVE-2020-17519-Apache-Flink
CVE-2020-17519 Apache Flink lettura arbitraria di file Ambito di impatto Apache Flink 1.5.1 1.11.2 POC /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd Istruzioni per l'uso dello script python3 CVE-2020-17519 --help Visualizza la...
CVE-2026-59298 Potential for improper filtering of HTTP headers in Spring Cloud Function
Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...
CVE-2026-59298
Spring Cloud Function is affected by improper filtering of HTTP headers , allowing potential header manipulation. The vulnerability spans multiple release lines: 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier . The CVSS 3.1 score is 3.1 (LOW) , reflecting a network-based attack ...
Grafana_POC-CVE-2021-43798
Grafana-Poc Этот инструмент не должен использоваться для незаконных целей. 1. Способ использования: python3 grafanahole.py Введите ip:port в domain.txt 2. Область воздействия уязвимости Затронутые версии: Grafana 8.0.0 - 8.3.0 Безопасные версии: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...
CVE-2026-24061-GNU-inetutils-Telnet-Detector
كاشف CVE-2026-24061 لـ GNU inetutils Telnet أداة آمنة للكشف السلبي لتحديد التعرض المحتمل لثغرة CVE-2026-24061 ، وهي ثغرة تؤثر على إصدارات معينة من GNU inetutils telnet. صُمم هذا المشروع لـ خطوط أنابيب DevOps ، وعمليات تدقيق البنية التحتية ، ومحافظ الأمن الدفاعي. ما هي CVE-2026-24061؟ CVE-2026-240...
CVE-2026-79775
rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain m...
CVE-2026-19271 Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows LDAP Injection. This issue affects Liderahenk: from 3.4.0 before 3.5.5...
CVE-2026-18985
CVE-2026-18985 is an Incorrect Authorization vulnerability in the Drupal Edit in-place field contrib module (versions 0.0.0 through 2.1.1 ). The module fails to sufficiently verify access rights when editing entities, allowing a malicious user to craft requests and modify any field on any entity ...
DEBIAN-CVE-2026-65637
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
The “Use After Free” vulnerability in the Linux kernel allows for the execution of code in a local environment on Linux, x86, and ARM bluetooth modules. This vulnerability is associated with program files located at https://gitee.com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/afbluetooth.C...
Astra Linux – Vulnerability in curl
There is an improper authentication vulnerability in curl versions 7.33.0 through and including 7.82.0. This vulnerability may allow for the reuse of OAUTH2-authenticated connections without ensuring that the connection was authentically verified with the same credentials used for this transfer...
Astra Linux – Vulnerability in curl
curl 7.1.1 up to and including 7.75.0 is vulnerable to a “Exposure of Private Personal Information to an Unauthorized Actor” by leaking credentials in the HTTP Referer: header. libcurl does not remove user credentials from the URL when automatically filling in the Referer: HTTP request header fie...
CVE-2026-62243
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...
CVE-2026-15742 affecting package postgresql for versions less than 16.15-1
CVE-2026-15742 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12
CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12. A patched version of the package is available...
CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
PT-2026-78864
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the H.245 protocol dissector can lead to a crash, resulting in a denial of service. A protocol dissector is a software...