CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE 分析报告 Drupal RCE CVE-2018-7600 请务必将你的地址填入脚本中！ 描述： 在 Drupal 7.x 和 8.x 的多个子系统中存在一个远程代码执行漏洞。该漏洞可能允许攻击者利用 Drupal 站点的多个攻击向量，从而导致站点完全被入侵。 解决方案： 升级到 Drupal 7 或 8 核心的最新版本。 如果你正在运行 7.x，请升级到 Drupal 7.58。（如果无法立即更新，你可以尝试应用此补丁来修复漏洞，直到能够完全更新为止。）如果你正在运行 8.5.x，请升级到 Drupal...

EUVD-2026-80065

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...

EUVD-2026-80051

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-80011

A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...

CVE-2020-0114-systemui

正在进行 LINKS https://vulners.com/cve/CVE-2020-0114 https://source.android.com/security/bulletin/2020-06-01 Android 中的特殊攻击面（三）—— 隐蔽的 call 函数...

CVE-2019-12949

CVE-2019-12949 De la vulnerabilidad de Cross Site Scripting a la ejecución remota de código en pfSense 2.4.4-p2 y 2.4.4-p3 Descripción de la información: En pfSense 2.4.4-p2 y 2.4.4-p3, si es posible engañar al administrador autenticado para que haga clic en un botón de una página de phishing, un...

Rubrics-as-an-Attack-Surface

评分标准作为攻击面：LLM 评判器中的隐蔽偏好漂移 📊 数据集 • 🤖 训练模型 • 📝 论文 • 💻 代码库 本代码库包含论文 Rubrics as an Attack Surface: Stealthy Preference Drift in LLM Judges 的代码，作者为 Ruomeng Ding、Yifei Pang、He Sun、Yizhong Wang、Steven Wu 和 Zhun Deng。 我们研究了基于 LLM 的评估与对齐流程中的评分标准诱导偏好漂移（Rubric-Induced Preference Drift, RIPD）...

CVE-2026-92184

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2023-0386_POC

Team CVE-MD 本仓库提供了CVE-2023-0386的概念验证： https://nvd.nist.gov/vuln/detail/CVE-2023-0386 团队成员：Bǎnicǎ Dragoș-Marius 和 Borsos Matheas-Roland 视频链接： https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Linux OverlayFS 本地权限提升（PoC） 概述 本仓库包含针对 CVE-2023-0386 的 概念验证（PoC）利用代码 ，该漏洞是 Linux 内核 OverlayFS...

CVE-2026-73459

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...

privesc-CVE-2015-5602

Sudo =1.8.14 本地权限提升 Sudo（su "do"）允许系统管理员赋予特定用户（或用户组）以 root 身份运行部分（或全部）命令的能力，同时记录所有命令和参数。 漏洞环境 要为你的测试搭建漏洞环境，你需要安装 Docker，然后只需运行以下命令： root@kitploit: docker build -t privesc/cve-2015-5602 . docker run --rm -it privesc/cve-2015-5602 它会生成一个具有低权限用户的交互式 shell。 漏洞代码 该漏洞存在于 sudoedit 中，当通配符被使用两次时（例如...

CVE-2026-92213

a2ui-project a2ui (versions up to 0.10.6) is affected by an injection vulnerability in the Angular Renderer component. The vulnerable code is located in the function z.any within the file renderers/web_core/src/v0_9/schema/server-to-client.ts. By manipulating the primaryColor argument, a remote a...

CVE-2026-92213 a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection

A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/webcore/src/v09/schema/server-to-client.ts of the component Angular Renderer. Performing a manipulation of the argument primaryColor results in injection. The attack is possible t...

EUVD-2026-80932

An issue in Sogou Sogou Input Method 16.3.0.3498 fixed in 16.3.0.3498 allows a remote attacker to execute arbitrary code via the bizhelper.exe component...

CVE-2026-51990

Sogou Input Method (Tencent), a widely installed Windows Chinese input method, is vulnerable to one-click remote code execution via its biz_helper.exe protocol handler (sgbiz: URI). A crafted URI triggers the handler, which passes unvalidated arguments to SGMyInput.exe, opening an embedded unsand...

Fedora 43 : environment-modules (2026-6a8bb95fd4)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6a8bb95fd4 advisory. Update to 5.6.2 fix CVE-2026-85013 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2026-79298

Howyar Technologies SysReturn (NetCopy feature) prior to v11.3.034 ships a vulnerable IA-32 UEFI boot path (BOOTia32.efi) that still carries the custom RxPE PE loader from the original CVE-2024-7344, loading unsigned payloads from cloak32.dat and bypassing Secure Boot verification. The x64 path w...

CVE-2024-44542

CVE-2024-44542 描述：todesk v1.1 被发现包含一个SQL注入漏洞，漏洞位于 /todesk.com/news.html 的 title 参数中。 漏洞类型：SQL注入 产品供应商：todesk 受影响产品版本：todesk - v1.1 受影响组件：todesk.com, news.html 攻击类型：远程 影响信息泄露：是 攻击向量：攻击者可以通过构造特定的URL请求来利用该SQL注入漏洞，例如：访问 https://todesk.com/news.html?tagid=&title=1' AND SELECT 6268 FROM SELECTSLEEP10gh...

CVE-2025-46203

描述 Unifiedtransform v2.0 存在不正确的访问控制漏洞。任何用户（学生和教师）都可以通过 /students/edit/id 端点访问和修改学生记录。此功能本应仅供管理使用。利用此漏洞可能导致未授权数据操作和权限提升。 供应商：Unifiedtransform 产品 一个学校管理软件 v2.0 受影响组件 整体访问控制机制，负责实施用户权限和角色。 路由：GET /students/edit/id 控制器：UserController 方法：editStudents 以及所有其他与编辑学生资料相关的端点和功能。 PoC/攻击向量 步骤 1： 按照官方 GitHub...

CVE-2023-47459

CVE-2023-47459 描述 在 Knovos Discovery v.22.67.0 中发现了一个漏洞，允许远程攻击者通过以下组件访问机密信息： /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName、/DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation 以及 /DiscoveryProcess/Service/Admin.svc/getReviewIdForReport。 漏洞类型 堆栈跟踪 / 信息泄露 产品供应商...