CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

CVE-2024-1207

Booking Calendar = 9.9 - 未经验证的SQL注入（CVE-2024-1207） https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/booking/booking-calendar-99-unauthenticated-sql-injection POC: POST /wp-admin/admin-ajax.php HTTP/1.1 Host: vulnerablesite.com User-Agent: Mozilla/5.0 Windows NT 10.0; Win64...

CVE-2017-8367

CVE-2017-8367 针对漏洞 CVE-2017-8367 Easy Mov Converter 注册功能的基于栈的缓冲区溢出 PoC 漏洞利用程序。 用法 运行脚本后，将生成包含有效载荷的 POCPayload.txt 文件。 python3 payloadgeneratorCVE-2017-15950.py 在记事本中打开输出文件，将 ASCII 输出复制到 Easy Mov Converter 注册功能的用户名字段中。...

CVE-2019-5418

CVE-2019-5418 Otro escáner basado en burl de tomnomnom go build go get github.com/fatih/color cat websites.txt | ./CVE-2019-5418...

CVE-2025-61246

CVE-2025-61246 - Vulnerabilidad de Inyección SQL en Sistema de Compras en Línea Descripción general Este repositorio contiene una Prueba de Concepto PoC para CVE-2025-61246 , una vulnerabilidad crítica de Inyección SQL descubierta en la aplicación PHP Sistema de Compras en Línea. La vulnerabilida...

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

sudo: Sudo: Policy bypass allows unauthorized program execution via execveat

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

Reachability-Check

可达性检测 🌐 EN | TR 基于浏览器的可达性检测器——测试网络连接、防火墙规则和访问限制。 单个HTML文件。零依赖。无需Web服务器即可运行。 功能特性 双重测量： HTTP Fetch + Image Ping（通过各服务自身的favicon） 服务包： 基于JSON，社区可扩展 规则检查（RuleCheck）： 企业网络策略审计——应可达 / 应被阻断 + 延迟阈值 筛选与分组： 快速 / 慢速 / 阻断过滤器，类别 / 状态 / 扁平列表视图 自定义查询： 对任意URL或域名进行即时测试 本地 + 公网IP 检测（WebRTC + ipify） 拖放JSON...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

EUVD-2026-85726

A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:71647)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71647 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

EUVD-2026-86471

Espruino 2v29 commit bffc6d0 contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-bit builds. A remote attacker can supply JavaScript input that triggers an exception and reaches jslPrintTokenLineMarker, which passes the address of a 4-byte...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:71650)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71650 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages...

RHEL 10 : glib2 (RHSA-2026:71404)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:71404 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, t...

CVE-2026-84399: Incorrect Authorization

The Botslab G980H dash camera firmware contains an authorization vulnerability in its session based command functionality. The product does not sufficiently associate an authenticated session with the client connection that established it, and subsequent privileged operations rely on possession o...

RHEL 10 : libxml2 (RHSA-2026:71586)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71586 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: libxml2:...

CVE-2026-58008: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...