126981 matches found
The vulnerability of the `createSubPicRefBufs` function in the vvdecapp (VVdeC) decoder allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.
The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...
Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.
Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.
The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...
The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2025-25014
POC para CVE-2025-25014 Una vulnerabilidad de contaminación de prototipos en Kibana conduce a la ejecución de código arbitrario a través de solicitudes HTTP manipuladas a los endpoints de aprendizaje automático y generación de informes. Actualmente este POC solo detecta instancias vulnerables. Us...
CVE-2024-24787-PoC
CVE-2024-24787-PoC On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive. This is not my bug, I just made a PoC for it. Reference...
RpcProxyInvoke
RpcProxyInvoke 概要 ローカルおよびリモートコードを実行する一般的な方法を作成するために、私たちは比較的目立たないコード実行方法を設計しました。これを内部ではRpcCraft（Self）およびRpcExec（Remote Process）と呼んでいます。この手法は、エクスプロイト開発者の間でよく知られている方法論を活用し、NdrServerCall2やNdrServerCallAllなどのRPC（リモートプロシージャコール）サーバーコールを悪用して任意のコードを実行します。 サーバーコールの悪用による実行...
CVE-2021-43811
CVE-2021-43811 awslabs/sockeye Inyección de código mediante carga insegura de YAML CVE-2021-43811 Descripción de NVD Sockeye es un framework de secuencia a secuencia de código abierto para la traducción automática neuronal, construido sobre PyTorch. Sockeye utiliza YAML para almacenar las...
spd_flasher
CVE-2022-38694 固化方法 — RP2350 USB Host 自动刷机器 English README 教学文档 UDX710 启动链逆向与 RP2350 固化开机教学 利用 CVE-2022-38694 Unisoc BootROM 漏洞，通过 Raspberry Pi RP2350 USB Host 实现一次性开机发送 SPL Loader，启动任意 u-boot。 将原本需要 PC + spddump 完成的漏洞利用流程固化到 RP2350 微控制器 — 插入设备即自动完成，支持循环刷机。 原理概述 CVE-2022-38694 是 Unisoc BootROM...