CVE-2024-7928

CVE-2024-7928: Уязвимость произвольного чтения файлов в FastAdmin V1.3.4.20220530 Инструмент CVEHunter для обнаружения уязвимости и эксплуатации с целью получения данных БД для экземпляров FastAdmin для CVE-2024-7928, отличающийся точностью и асинхронной конкурентностью по сравнению с другими PoC...

Next.JS-CVE-2025-29927

Scanner de vulnérabilité Next.js CVE-2025-29927 Un outil de sécurité pour détecter et vérifier les applications Next.js vulnérables à CVE-2025-29927 Contournement d'authentification. Fonctionnalités 🎯 Détection précise de Next.js avec plusieurs méthodes de vérification 🔍 Comparaison précise des...

jenkins_scan

jenkinsscan Trouve l'environnement Jenkins et vérifie CVE-2024-23897 Comment ça fonctionne Détection de Jenkins Teste les chemins : /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifie via : 1. Header X-Jenkins — le plus fiable, renvoie aussi la version 2. Header X-Hudson —...

CVE-2026-45798

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.5.0 until 4.14.6 and 5.0.0-beta2, comparewazuhversions in src/shared/versionop.c copies the attacker-controlled enrollment V: field into a 10-byte stack buffer with strncpy but does not explicitly...

Exploit for Use After Free in Redis

redis-cve-2026-23479-check A safe, read-only version chec...

Lightning Flow Scanner Vulnerable to Code Injection via Unsafe Use of `new Function()` in APIVersion Rule

Impact The APIVersion rule uses new Function to evaluate expression strings. A malicious crafted flow metadata file can cause arbitrary JavaScript execution during scanning. An attacker could execute arbitrary JavaScript during a scan by supplying a malicious expression within rule configuration ...

Exploit for CVE-2025-29927

Next.js Vulnerability Scanner CVE-2025-29927 !Go Report C...

Cross site scripting in Elefant CMS

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

GHSA-5HFM-G799-WJW6 Cross site scripting in Elefant CMS

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

CVE-2017-20058

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

CVE-2017-20058 Elefant CMS Version Comparison Persistent cross site scriting

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

CVE-2017-20058 Elefant CMS Version Comparison Persistent cross site scriting

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

AuraBorealisApp - Do You Know What's In Your Python Packages? A Tool For Visualizing Python Package Registry Security Audit Data

AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis designed for large scale security auditing of Python packages. The...

How to Upgrade Receiver from StoreFront

Question: How to upgrade Receiver from StoreFront? Answer: 1. Go to C:\Program Files\Citrix\Receiver StoreFront\Receiver Clients\. Create a Windows folder if it doesn’t exist. 2. In the Windows folder, paste the Receiver for Windows with the version you want to set as the threshold, overwriting...

Enterprise security vulnerability notification engine-vulnerability warning-the black bar safety net

Today most enterprises are in vulnerability scanning+vulnerability announcements, there are the following two questions: 1. The drain sweep the presence of the“scan cycle is long, the scan database not updating”, etc., while the scanning report whether the number of interference terms, leading to...

Microsoft Patches FASTFIX on Older Versions of Windows

UPDATE – Microsoft this week patched a vulnerability in the FASTFAT driver that interacts with FAT32 disk partitions, closing a privilege escalation and code execution hole in Windows Server 2003, Windows Vista and Windows Server 2008. But what about Windows 7 and up versions of the OS, you may b...

DEBIAN-CVE-2014-0479

reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compareversions and reportbug/checkversions.py...

[SECURITY] Fedora 19 Update: nodejs-semver-2.0.10-1.fc19

The semantic version comparison library for the Node.js package manager np m...

[SECURITY] Fedora 18 Update: nodejs-semver-2.0.10-1.fc18

The semantic version comparison library for the Node.js package manager np m...

Ubuntu 5.04 : mozilla-firefox vulnerabilities (USN-149-1)

Secunia.com reported that one of the recent security patches in Firefox reintroduced the frame injection patch that was originally known as CAN-2004-0718. This allowed a malicious website to spoof the contents of other websites. CAN-2005-1937 In several places the browser user interface did not...