208062 matches found
CVE-2020-16270
CVE-2020-16270 建议描述 : 低于 3.3.39 版本的 OLIMPOKS 允许 Auth/Admin ErrorMessage XSS。 远程攻击者可利用已发现的漏洞，向受害者的浏览器中注入恶意 JavaScript 载荷，作用于易受攻击的应用程序上下文中。执行代码可用于窃取管理员 cookie、影响目标应用程序的 HTML 内容以及执行钓鱼相关攻击。该易受攻击的应用程序被超过 3000 家组织使用，涵盖从零售到工业的不同领域。 附加信息 : 已向供应商发送有关该漏洞的信函。漏洞已得到供应商确认。...
weblogic2021
本项目涉及到的仅为安全研究和授权情况下使用，其使用人员有责任和义务遵守当地法律条规。 weblogic2021 CVE-2021-1994、CVE-2021-2047、CVE-2021-2064、CVE-2021-2108、CVE-2021-2075、CVE-2019-17195、CVE-2020-14756、CVE-2021-2109...
CVE-2020-1048
CVE-2020-1048 CVE-2020-1048PrintDemon 的 POC 漏洞利用代码 受影响系统 下面链接中提到的所有 Windows 版本均受影响: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1048 复现步骤 1. 修改 Source.c 顶部的变量 gPortName 和 gInputFile。 2. 使用 Visual Studio 编译并运行。 3. 重启打印机服务spoolsv或重启系统。 备注...
CVE-2026-91740
A flaw was found in Skia, a 2D graphics library used in Google Chrome. This vulnerability, stemming from an uninitialized resource, allows a remote attacker to obtain sensitive cross-origin data. By crafting a malicious HTML page, an attacker can trick a user into visiting it, leading to the...
Simple-Sweet32
Sweet32 这是 Sweet32 攻击（CVE-2016-2183）的演示：https://sweet32.info/ 该攻击是生日攻击的一个实例，利用 CBC 模式下具有小分组大小（64 位）的加密算法，例如 3DES 和 Blowfish。 攻击需要生成大量已知明文的加密分组。 生成后，可以识别出相同的加密分组，并用于识别未知分组的明文值。 此实现使用 3DES（三重 DES） 作为其加密算法， 其分组大小为 64 位（8 字节）——与使现实世界中的 3DES 易受 Sweet32 攻击的相同分组大小。 攻击公式（兽性攻击） 当两个密文分组碰撞（ci =...
CVE-2024-24919-POC
CVE-2024-24919-POC Lea sobre ello - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 La vulnerabilidad permite a un atacante remoto no autenticado leer el contenido de un archivo arbitrario ubicado en el dispositivo afectado. Plantilla de Nuclei:...
CVE-2022-24853
CVE-2022-24853 Metabase NTLM 反射/中继攻击 CVE-2022-24853 关于此发现的博客文章：https://secure77.de/metabase-ntlm-relay-attack/ GitHub 安全公告：https://github.com/metabase/metabase/security/advisories/GHSA-5cfq-582c-c38m POC root@kitploit: http://metabase-target-server.com/api/geojson?url=jar:file:\test.txt!/...
cve-2018-6574
cve-2018-6574 gcc -shared -o attack.so -fPIC attack.c...
CVE-2026-92114
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...
CVE-2026-83408
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...
CVE-2026-73444
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...
CVE-2026-91741
A flaw was found in CacheStorage in Chromium. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a compromise of the affected system...
CVE-2026-91711
A flaw was found in Google Chrome. An out-of-bounds write vulnerability in the ServiceWorker component could allow a remote attacker to execute arbitrary code. This exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to arbitrary code execution within the...
CVE-2026-76859
Netcore NR255-V version 1.5.130703 is affected by a sensitive information disclosure vulnerability in the user_pass_show.cgi component. Low-privilege attackers can leverage ui_config_2.xml and misc.js to disclose router credentials, resulting in a high confidentiality impact with no integrity or ...
CVE-2020-24088
CVE-2020-24088 Windows 权限提升 Foxconn Live Update Utility 2.1.6.26 中的 MmMapIoSpace 例程被发现存在一个问题，允许本地攻击者提升权限。 CVE 链接 - https://vulners.com/cve/CVE-2020-24088...
CVE-2026-92114 a2ui-project a2ui Basic Catalog safe_regex.ts redos
A vulnerability was identified in a2ui-project a2ui up to 0.10.6. Affected is an unknown function of the file renderers/webcore/src/v09/basiccatalog/functions/saferegex.ts of the component Basic Catalog. Such manipulation leads to inefficient regular expression complexity. The attack can be...
CVE-2026-92114
a2ui-project a2ui versions up to 0.10.6 are affected by a Regular Expression Denial of Service (ReDoS) vulnerability in the Basic Catalog component, specifically in the file renderers/web_core/src/v0_9/basic_catalog/functions/safe_regex.ts. The root cause is inefficient regular expression complex...
CVE-2020-23968-ILEX-SignGo-EoP
CVE-2020-23968 Ilex International Sign&go Workstation Security Suite 7.1 允许通过针对 C:\ProgramData\Ilex\S&G\Logs\000-sngWSService1.log 的符号链接攻击提升权限。...
CVE-2021-33690
CVE-2021-33690 CVE-2021-33690 SAP NetWeaver 开发基础设施中的服务端请求伪造漏洞 root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL: https://sap.com/ Bug: SSRF Date of Public...