CVE-2022-46169

CVE-2022-46169 – 说明与项目概述 Cacti 未授权远程代码执行 这是什么项目？ 本项目是一项网络安全任务，演示了 CVE‑2022‑46169 ：开源网络监控平台 Cacti （版本 ≤ 1.2.22）中的一个严重漏洞。该漏洞允许未认证的攻击者在服务器上执行任意操作系统命令——无需任何登录。 本项目的目标是理解该漏洞，在受控的实验室环境中复现它，并展示其影响。 什么是 CVE‑2022‑46169？ CVE‑2022‑46169 是 Cacti 中两个缺陷的组合： 1. 授权绕过 文件 remoteagent.php 通常只允许 Cacti...

CVE-2026-85181

CAT (dianping/cat) through 3.1.0 is vulnerable to session cookie forgery due to using Java String.hashCode as the sole integrity check without a server-side secret key. An attacker can compute valid checksums offline and, by setting the x-forwarded-for header, bypass IP-binding validation to crea...

EUVD-2014-6116

Malware in sbrugna...

EUVD-2024-34622

Malicious code in bioql PyPI...

PT-2024-25701

Name of the Vulnerable Software and Affected Versions Archer Platform versions prior to 2024.03 Description An issue was discovered in the Archer Platform, where an X-Forwarded-For Header Bypass vulnerability exists. This allows an unauthenticated attacker to potentially bypass intended...