CVE-2024-36991

CVE-2024-36991: Windows의 Splunk Enterprise 버전 9.2.2, 9.1.5, 9.0.10 미만에 영향을 미치는 경로 탐색 취약점 비동기 성능을 갖춘 CVE-2024-36991 취약점 탐지 및 익스플로잇 도구 CVEHunter 설치 root@kitploit: git clone https://github.com/th3gokul/CVE-2024-36991.git cd CVE-2024-36991 pip install -r requirements.txt python3 cvehunter.py --help 🚀...

WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 WSFTP CVE-2023-40044의 영향을 추적하는 모든 것을 포함한 저장소 영향을 받을 가능성이 있는 조직 및 헤더 방법을 사용하는 도메인을 포함합니다. 또한 MOVEit 및 WSFTP에 대한 새로운 기사를 추적하는 뉴스 티커를 구축했으며, https://firehose.kenbuckler.com/moveit 에서 확인할 수 있습니다...

CVE-2026-16643

CVE-2026-16643 affects the Drupal contrib module Lunr exposed filters across all versions (. ). The vulnerability is rated Critical severity per the Drupal security advisory (SA-CONTRIB-2026-086). The Drupal security team has marked the project as unsupported , noting a known security issue that ...

cvelistV5

Примечание 2026-2-17: Добавлен дополнительный день обработки для нормализации дат с целью устранения потенциальных несоответствий Новое расписание нормализации дат: 16.02.26 — 28.02.26 Примечание 2026-2-10: Изменение файлаdeltaLog.json при нормализации дат записей Файл deltaLog.json обычно хранит...

Security Bulletin:IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

Summary WmServiceMock is bundled with IBM webMethods Integration Server. Remediation steps are provided below CVE-2026-12118 Vulnerability Details CVEID:CVE-2026-12118 DESCRIPTION: IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary...

CVE-2022-41040_Mitigation

загрузите скрипт на затронутую машину и запустите его...

LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache- from n/a through 5.7. id: CVE-2023-40000 info: name: LiteSpeed Cache = 5.7 - Unauthenticated Stored XSS...

Vite - Arbitrary File Read

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import&raw?? to the URL bypasses this limitation and returns the file content if it...

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Juniper Web Device Manager - Cross-Site Scripting

Juniper Web Device Manager J-Web in Junos OS contains a cross-site scripting vulnerability. This can allow an unauthenticated attacker to run malicious scripts reflected off J-Web to the victim's browser in the context of their session within J-Web, which can allow the attacker to steal...

GitLab CE/EE - Information Disclosure

GitLab CE/EE is susceptible to information disclosure. An attacker can access runner registration tokens using quick actions commands, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. Affected versions are from 12.10 before 14.6.5,...

XWiki Platform - SQL Injection

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...

Apache Flink 1.5.1 - Local File Inclusion

Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 Repositorio con todo lo que tengo para rastrear el impacto de MOVEit CVE-2023-34362 Incluye posibles organizaciones afectadas y dominios que utilizan métodos de descubrimiento de encabezado SFTP y cookies. También he creado un ticker de noticias que rastrea nuevas historias...

CVE-2019-18634

CVE-2019-18634...

TFTPlunder

TFTPlunder: CVE-2023-29930용 익스플로잇 이것은 Genesys이전 명칭 InIn TFTP 프로비저닝 서버의 블라인드 파일 읽기/쓰기 취약점을 위한 익스플로잇 스크립트입니다. 취약점 정보 이 취약점은 TFTP 루트 경로와 파일 확장자에 대한 제한 없는 구성 옵션 때문에 발생합니다. 즉, Admin 인터페이스에서 TFTP를 원하는 디렉터리로 변경하고 원하는 파일을 업로드하거나 다운로드할 수 있습니다. 단, TFTP는 프로토콜상 파일 목록을 허용하지 않으므로 이것이 블라인드 파일 읽기 취약점이 되는 이유입니다. ...

CVE-2026-12556

HP Easy Start for macOS versions prior to 2.16.7.260722 contain potential security vulnerabilities that may lead to escalation of privilege . HP's CVSS 4.0 rating is 7.7 (HIGH) , with a network attack vector, low complexity, and low privileges required, yielding high impact on the vulnerable syst...

BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...

PT-2026-80910

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities...