CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - El producto SearchBlox anterior a V-9.2.1 es vulnerable a la inyección de macros CSV. Descripción del producto: SearchBlox simplifica la búsqueda empresarial para organizaciones complejas. Las herramientas intuitivas e inteligentes de SearchBlox ofrecen una...

CVE-2022-31007-Python-POC

Python 自动化实现以下 文章 中描述的 elabFTW 账户锁定绕过和登录暴力破解（影响 4.1.0 之前的版本）。 这两个脚本可用于名为 Source 的 Proving Grounds Practice 实验室，该实验室运行着存在漏洞的 elabFTW 版本——一个免费开源的电子实验室笔记本。 账户登录需要电子邮件地址，因此在暴力破解用户名之前，需要知道任何潜在用户的有效域名。 一旦找到有效账户，将其输入到登录暴力破解脚本中。...

CVE-2019-9053

CVE-2019-9053 CMS Made Simple 2.2.10 - SQL注入 由 Daniele Scanu 发现。可在此处 此处 找到 修复问题： "File "/home/user/CVE-2019-9053", line 25 print "+ Specify an url target" ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ SyntaxError: Missing parentheses in call to 'print'. Did you mean print...?", 包括所有其他不正确的语法...

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2021-23383

CVE-2021-23383 包 handlebars 在 4.7.7 之前存在原型污染漏洞，当选择某些编译选项来编译来自不可信源的模板时。...

linux_CVE-2020-24490-beforePatch

此存储库没有 README。...

CVE-2023-38831

CVE-2023-38831 概念验证（PoC） 这是一个易于使用的针对 CVE-2023-38831 的漏洞利用工具，该漏洞影响 WinRAR 6.23 之前的版本。 已发现 RARLabs WinRAR 6.23 之前版本存在可利用的漏洞。该漏洞使攻击者能够通过特制的 ZIP 存档执行任意代码。该漏洞源于对包含良性文件（如普通 .PDF 文档）以及与这些文件同名的文件夹的 ZIP 存档处理不当。当用户尝试访问该良性文件时，存档中可能包含一个同名文件夹，其中包含可执行内容。在尝试访问良性文件的过程中，该文件夹中的恶意内容会被处理，从而促成了任意代码的执行。该漏洞的利用已在 2023 年...

CVE-2026-92767

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-92767 Twenty20 Image Before-After <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'offset' Shortcode Attribute

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-91967

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-53376

CVE-2024-53376 CyberPanel 已认证操作系统命令注入 受影响版本 CyberPanel 版本 2.3.8 存在操作系统命令注入漏洞。利用该漏洞，攻击者需首先登录 Web 面板。 测试环境 CyberPanel 2.3.7 技术细节 攻击者可以使用 HTTP OPTIONS 请求，指示运行 CyberPanel 应用的 Web 服务器执行任意命令。该漏洞位于 /websites/submitWebsiteCreation 端点。 该端点调用了 /websiteFunctions/views.py 文件中的 submitWebsiteCreation 函数。...

CVE-2019-9053-CMS46635-python3

CVE-2019-2019-9053--CMS46635 CMS Made Simple 2.2.10 - Inyección SQL python3...

CVE-2022-33171

CVE-2022-33171: Inyección SQL en TypeORM Nota: Este es un análisis en curso de CVE-2022-33171. Los detalles aquí proporcionados pueden actualizarse a medida que se disponga de más información.actualmente no funciona Detalles de la Vulnerabilidad ID CVE: CVE-2022-33171 Producto: TypeORM Versiones...

m4ngl3m3

m4ngl3m3! Quick Installation: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE OUTPUTFILE Common password patte...

CP Image Store with Slideshow <= 1.0.67 - SQL Injection

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the orderingby query parameter before using it in a SQL statement in pages where the codepeople-image-store is embed, allowing unauthenticated users to perform an SQL injection attack. id: CVE-2022-1692...

OpenCode < 1.0.216 - Unauthenticated Remote Code Execution

OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability. The application exposes session and shell execution endpoints without proper authentication, allowing remote attackers to create sessions and execute arbitrary shell commands on the underlying serve...

Cobbler 'XML-RPC' - Authentication Bypass

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection

The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the order and orderby parameters to the ajaxfetchreportlist action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protecti...

CVE-2023-0099-exploit

CVE-2023-0099-利用 利用标题：simple urls 115 - 反射型XSS Google Dork: 利用作者：AmirZargham 厂商主页：https://getlasso.co/ 软件链接：https://wordpress.org/plugins/simple-urls/ 版本： 115 测试环境：firefox,chrome CVE：CVE-2023-0099 CWE：CWE-79 平台：多平台 类型：Web应用 描述 WordPress插件Simple URLs...

CVE-2024-27348

CVE-2024-27348 Para usos éticos únicamente, no se permiten actividades dañinas o maliciosas. Y es tu propia responsabilidad Puedes leer el análisis de la vulnerabilidad desde aquí: https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/ Escáner RCE de Apache HugeGraph Server...