867 matches found
Pixel-Flood-Attack
Pixel Flood DoS - CVE-2024-22393 PoC Webサーバー向けPixel Floodバグ 脆弱なバージョンのApache Answerを実行しているWebアプリケーションにおけるPixel Floodメモリ枯渇脆弱性をテストするための軽量なProof-of-Conceptです。 目次 説明 技術的詳細 影響を受けるバージョン 要件 使用方法 PoCの手順 検出 緩和策 バグバウンティのヒント 参考資料 免責事項 説明 このリポジトリは、CVE-2024-22393 のProof-of-Conceptです。これはApache...
Apache-Hunter
ApacheHunter - 高度なApacheサーバースキャナー 開発者: Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunterは、Apacheサーバーを検出し、バージョンを特定し、Apache AnswerインストールにおけるCVE-2024-22393（Pixel Flood脆弱性）を確認するために設計された強力なスキャナーです。 機能 ✅ Apacheサーバーの検出とバージョン抽出 ✅ CVE-2024-22393脆弱性のチェック ✅ 複数の検出方法（ヘッダー、ページ分析、パスプロービング） ✅...
CVE-2026-82535 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php
Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...
Linux Distros Unpatched Vulnerability : CVE-2026-57162
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media...
CVE-2026-82024
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz question answer title fields. Attackers can store arbitrary...
EUVD-2026-70651
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz question answer title fields. Attackers can store arbitrary...
CVE-2026-82024
The LearnPress WordPress Plugin (before 4.4.6 ) contains a stored XSS vulnerability. Authenticated users with the Instructor role can inject arbitrary JavaScript by submitting unsanitized input into quiz question answer title fields , which is rendered through an unescaped HTML sink . The payload...
CVE-2026-82023
LearnPress WordPress Plugin versions before 4.4.6 are affected by a broken object-level authorization (BOLA) vulnerability in the question answer insert code path. The root cause is a missing ownership check that fails to verify whether the question belongs to the authenticated user. An attacker ...
CVE-2026-82023 LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership check on the question answer insert path...
CVE-2026-81196
The MasterStudy LMS WordPress plugin before 3.7.46 fails to properly verify ownership of quiz question identifiers, an IDOR flaw that lets any user with instructor-level access read other instructors' quiz questions, including correct answers and explanations . The CVSS 3.1 score is 2.7 (Low) , r...
WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Instructor+ Quiz Answer Disclosure vulnerability
Instructor+ Quiz Answer Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...
WordPress Quiz and Survey Master (QSM) plugin < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure vulnerability
Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Quiz And Survey Master versions 11.2.4...
CVE-2026-79615
The Quiz and Survey Master (QSM) WordPress plugin, in versions prior to 11.2.4 , contains an IDOR (Insecure Direct Object Reference) flaw: a missing authorization check on a REST API route that returns question bank entries. This allows any user with the Contributor role to read the questions, hi...
EUVD-2026-60386
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or...
CVE-2026-58442
CVE-2026-58442 affects Gitea and is described as a repository migration SSRF through a multi-answer DNS allow‑list bypass. The root cause is an allow‑list bypass during repository migrations that could enable SSRF to internal destinations. The CVSS 3.1 data indicates a medium base score (6.5) wit...
CVE-2025-15687
CVE-2025-15687 affects Open5GS up to version 2.7.6, specifically the SMF Diameter Gx Credit-Control-Answer Handler function smf_gx_cca_cb. The issue is described as a manipulation that results in a denial of service, with remote-launch potential. Public exploit exists according to the description...
CVE-2025-15687 Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may b...
CVE-2026-45414
Decidim is a participatory democracy framework. Prior to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentication is not bound to the organization selected by the current host, allowing a JWT issued for one tenant to be replayed against another tenant’s API to read...
