148608 matches found
CVE-2026-104809
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...
CVE-2026-104805
DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...
CVE-2026-100103
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...
CVE-2026-104809 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...
CVE-2026-104809
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...
CVE-2026-100102 RCE via exposed JDWP debug agent in P4Search
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...
CVE-2026-100103
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...
CVE-2026-100103 Authentication bypass via default auth token in P4Search
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...
CVE-2019-25777
The YAML library for Perl (versions before 1.27_001 ) is vulnerable to arbitrary code execution due to an improper control of dynamically-identified variables during the loading of perl/glob documents. An attacker can provide a document that replaces package variables, such as $YAML::LoadCode or ...
CVE-2021-40870
CVE-2021-40870 Aviatrix 中允许已认证用户上传危险类型文件，从而执行任意代码 https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...
androguard
Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...
CVE-2020-36603
CVE-2020-36603 HoYoVerse（原 miHoYo）原神反作弊驱动程序 mhyprot2.sys 1.0.0.0 未充分限制非特权函数调用，允许本地非特权用户在 Microsoft Windows 系统上以 SYSTEM 权限执行任意代码。首先需要具有管理员权限的用户安装 mhyprot2.sys 驱动程序。 认证| 复杂度| 向量 ---|---|--- 不可用| 不可用| 不可用 机密性| 完整性| 可用性 ---|---|--- 不可用| 不可用| 不可用 CVSS 分数：不可用 参考...
CVE-2023-42426
CVE 编号： CVE-2023-42426 漏洞类型： 跨站脚本 描述： Froala Froala Editor v.4.1.1 中的跨站脚本（XSS）漏洞允许远程攻击者通过“插入图像”组件中的“插入链接”参数执行任意代码。 复现步骤： 1. 选择“插入图像”选项并添加一张新图像。 2. 点击已添加的图像，然后使用“插入链接”选项并输入载荷： https://example.com" onmouseover='alertxss'。 参考： 1. https://cve.report/CVE-2023-42426 2...
CVE-2024-34102
CVE-2024-34102 ★ 感谢 @th3gokul、Sanjaith3hacker 和 Chocapikk 提供的原始代码库。★ 描述 CVE-2024-34102：Adobe Commerce XXE 漏洞 描述：Adobe Commerce 2.4.7、2.4.6-p5、2.4.5-p7、2.4.4-p8 及更早版本受到 XML 外部实体引用（'XXE'）限制不当（Improper Restriction of XML External Entity Reference）漏洞的影响，该漏洞可能导致任意代码执行。攻击者可通过发送引用外部实体的特制 XML...
spd_flasher
CVE-2022-38694 固化方法 — RP2350 USB Host 自动刷机器 English README 教学文档 UDX710 启动链逆向与 RP2350 固化开机教学 利用 CVE-2022-38694 Unisoc BootROM 漏洞，通过 Raspberry Pi RP2350 USB Host 实现一次性开机发送 SPL Loader，启动任意 u-boot。 将原本需要 PC + spddump 完成的漏洞利用流程固化到 RP2350 微控制器 — 插入设备即自动完成，支持循环刷机。 原理概述 CVE-2022-38694 是 Unisoc BootROM...
HelakuruV.1.1-DLLHijack
Vulnerabilidad de secuestro de DLL en Helakuru Resumen La versión 1.1v de Helakuru Desktop opera en arquitecturas de 64 y 32 bits. Durante las pruebas, se identificó que el programa intenta cargar wow64log.dll, que no está incluido de forma predeterminada en los sistemas operativos Windows...
CVE-2023-46818-python-exploit
CVE-2023-46818 漏洞利用 这是影响 ispconfig 3.2.11 及之前版本的漏洞的原始 PHP 脚本的 Python 版本。 原始 PHP 源码：https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html 此概念验证仅用于教育目的。 使用 python exploit.py http://10.10.10.10/ adminuser passwd 漏洞描述 通过 "records" POST 参数传递给 /admin/languageedit.php...
CVE-2026-48356
abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-48356 CVE-2026-48356 Magento Open Source 2.4.8-p5 — Adobe Adobe Commerce 受“危险类型文件不受限制上传”漏洞影响，该漏洞可能导致在当前用户上下文中执行任意代码。 | ---|--- CVE| CVE-2026-48356 · CVE.org CWE| CWE-434 CVSS| 严重：9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N 产品|...
CVE-2022-26134
CVE-2022-26134 概念验证 描述 在受影响版本的 Confluence Server 和 Data Center 中， 存在一个 OGNL 注入漏洞，允许未认证的攻击者 在 Confluence Server 或 Data Center 实例上执行任意代码。 概念验证 1. 运行 python3 confluence.py -u http://127.0.0.1 -c whoami 2. 获取结果 Payload URL 解码后的 payload：...