exploit-CVE-2016-8016-25

McAfee Virus Scan для Linux: множественные удалённые уязвимости ЭТОТ ЭКСПЛОИТ И ВЕСЬ КОД В ЭТОМ РЕПОЗИТОРИИ БЫЛИ УДАЛЕНЫ, ЧТОБЫ ИЗБЕЖАТЬ ЛЮБЫХ ПРОБЛЕМ, СВЯЗАННЫХ С НАРУШЕНИЕМ ЛИЦЕНЗИИ MCAFEE McAfee VirusScan Enterprise for Linux — это корпоративное антивирусное решение от Mcafee. Его уникальный...

CVE-2023-46003

CVE-2023-46003 Хранимый XSS в i-doit Pro 25 и ниже i-doit Pro 25 и ниже уязвимы для хранимой XSS-уязвимости. Это позволяет удаленным аутентифицированным злоумышленникам с низкими или высокими привилегиями сохранять опасные данные XSS-пейлоад или поддельную HTML-страницу в базе данных, которые буд...

EUVD-2026-70486

vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated caller. Authenticated attackers can change arbitrary account passwords by supplying a target account ID and that account's current password in the request body...

CVE-2023-5965

PoC для Espo CRM 7.2.4 CVE-2023-5965 и CVE-2023-5965 CVE-2023-5965 Advisory Аутентифицированный привилегированный злоумышленник может загрузить специально созданный zip-файл на сервер EspoCRM версии 7.2.5 через форму обновления, что может привести к выполнению произвольного PHP-кода. Чтобы...

CVE-2021-30146

CVE-2021-30146 Seafile 7.0.5 지속적 XSS Persistent XSS 제안된 설명: 애플리케이션서버 버전: 7.0.5 Seafile은 공유 라이브러리 기능을 통해 지속적 XSS에 취약합니다. 추가 정보: Seafile은 고성능과 신뢰성을 갖춘 오픈 소스 자체 호스팅 파일 동기화 및 공유 솔루션입니다. 취약점 유형: 교차 사이트 스크립팅 XSS 취약점에 대해 공급업체에 편지를 보냈습니다. 공격 벡터: 로컬 계정을 가진 공격자는 악성 JavaScript 코드가 포함된 특별히 생성된 라이브러리를 다른 사용자와...

EUVD-2026-70141

When NGINX Ingress Controller is configured with Ingress annotations, an injection vulnerability exists in the configuration generator of NGINX Ingress Controller. Multiple user-controllable fields are written into the generated NGINX configuration without sanitization. An authenticated attacker...

EUVD-2026-60441

ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal...

CVE-2025-54897-LAB

Лаборатория: CVE-2025-54897 — Уязвимость десериализации в Microsoft Office SharePoint 🚀 Обзор Данная лаборатория демонстрирует уязвимость десериализации в Microsoft Office SharePoint, которая позволяет выполнять удалённый код RCE. Проблема возникает из-за некорректной обработки недоверенных...

CVE-2024-50849

CVE-2024-50849 : XSS stocké dans WorldServer v11.8.2 Une vulnérabilité de Cross-Site Scripting XSS stocké dans la fonctionnalité "Rules" de WorldServer v11.8.2 permet à un attaquant distant authentifié d'exécuter du code JavaScript arbitraire. Un utilisateur authentifié disposant de privilèges...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center et Serveur Atlassian Score CVSS - 7.6 🔥 Description Cette vulnérabilité RCE Exécution de Code à Distance de sévérité élevée, identifiée CVE-2024-21689, a été introduite dans les versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 et 9.6.0 de Bamboo Data Center et...

CVE-2026-73781

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73766

Command injection vulnerabilities in the API endpoint of AOS-CX could allow an authenticated remote attacker with administrative privileges to inject arbitrary commands. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating...

CVE-2026-73757

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a server-side request forgery SSRF attack. A successful exploit allows an attacker to enumerate information about the internal structure of the AOS-CX host, leading to potential...

CVE-2026-73744

A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to disrupt the availability of the affected...

CVE-2026-73721

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabric Composer instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the...

EUVD-2026-69455

Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

EUVD-2026-69449

Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command injection against the affected system. Successful exploitation could allow an attacker to execute arbitrary commands as a...

CVE-2026-12661 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive...

CVE-2026-76111

Dell PowerStore is affected by an Incorrect Authorization vulnerability that allows an authenticated attacker with low privileges to invoke administrator-only operations, resulting in privilege escalation . The Dell-assigned CVSS v3.1 score is 8.8 (HIGH) with a vector of CVSS:3.1/AV:N/AC:L/PR:L/U...

EUVD-2026-69000

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 8.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...