66 matches found
CVE-2023-29007_win-version
CVE-2023-29007Windows版本 原始PoC https://github.com/ethiack/CVE-2023-29007 针对 CVE-2023-29007 的PoC仓库 更多信息请访问： https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...
CVE-2026-102335 Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config
Nginx Proxy Manager through 2.16.0 fails to restrict the advancedconfig field to administrators, allowing non-admin users with manage permissions to inject arbitrary nginx directives. Attackers can inject malicious nginx configuration such as alias directives to serve arbitrary files or control...
ansible-core security update
2.16.3-4 - Fix CVE-2026-11332 ansible-galaxy role installs could allow arbitrary git configuration injection via malformed role requirements RHEL-194126...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mailman (UTSA-2026-093164)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093164 advisory. /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. Tenable has extracted the preceding description block directly from the Unity Linux...
NPM: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
NPM: React Router: Arbitrary Constructor Injection via deserializeErrors in React Router SSR Hydration vulnerability discovered by ? in WordPress Npm react-router versions = 6.4.0, 7.18.0...
net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input
A flaw was found in Net::IMAP before 0.4.24, 0.5.14, and 0.6.4. Several commands accept raw string arguments sent to the server without validation or escaping; if derived from user-controlled input, CRLF sequences allow injection of arbitrary IMAP commands...
Cross-site Scripting (XSS)
Overview justhtml is an A pure Python HTML5 parser that just works. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the tomarkdown function. An attacker can inject arbitrary HTML content by supplying specially crafted input that includes HTML-significant characters...
EUVD-2020-19367
Malware in sbrugna...
EUVD-2008-1259
Malware in sbrugna...
EUVD-2005-1362
Malware in sbrugna...
EUVD-2014-4755
Malware in sbrugna...
EUVD-2021-10779
Malware in sbrugna...
EUVD-2020-28695
Malware in sbrugna...
EUVD-2017-15996
Malware in sbrugna...
EUVD-2015-8481
Malware in sbrugna...
EUVD-2021-1888
Malware in sbrugna...
EUVD-2019-0297
Malware in sbrugna...