CVE-2026-39919

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter base/sjpxopenjpeg.c that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image...

CVE-2026-91714

A flaw was found in Google Chrome. A remote attacker, leveraging social engineering, could exploit an observable discrepancy in fonts by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the leakage of sensitive information...

CVE-2026-91719

A code injection flaw was found in the XML component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=542115030...

chrome-CVE-2023-4357

chrome-CVE-2023-4357...

CVE-2025-7605

CVE-2025-7605 code-projects AVL Rooms Project V1.0/profile.php SQL注入 受影响产品名称 AVL Rooms 供应商主页 https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ 提交者 dazhi 漏洞文件 /profile.php 版本 V1.0 软件链接 https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-downloa...

React-Server-Components-Remote-Code-Execution-CVE-2025-55182-

此存储库没有 README。...

CVE-2026-91744

A flaw was found in Google Chrome. A race condition in the PlatformIntegration component could allow a remote attacker, who has compromised the renderer process and leveraged social engineering, to obtain sensitive information. This can occur when a user visits a specially crafted HTML page...

macnoise v1.0.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 テスト環境とNucleiテンプレート このリポジトリには、CVE-2021-21980（vSphere Web Clientのパス横断）を検出する高信頼性のNucleiテンプレートと、安全なローカルテストのために脆弱な動作を再現する小さなモック環境が含まれています。 ファイル: cve-2021-21980.yaml: 複数のエンコーディングバリアントとマッチャーを備えたNucleiテンプレート app.py: /eam/vibのパス横断脆弱性をシミュレートする小さなFlaskアプリ Dockerfile:...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR 一个使用 Rust 编写的小型 CLI 工具，用于复现与 CVE-2015-6668（Job Manager //文件名.ext）。 攻击模式：暴力枚举/猜测常见的年/月文件夹和文件名变体，以定位可访问的文件。 指示器：针对构造的 URL 返回 HTTP 200 响应，表示文件可公开访问。 该工具执行简单的 GET 请求，并（默认）报告第一个发现的公开文件。 描述 该漏洞源于上传内容的访问控制薄弱。如果应用程序将文件存储在可预测的公开位置且未进行适当的授权检查，攻击者可以枚举可能的文件路径并通过 HTTP...

CVE-2026-91712

A flaw was found in Google Chrome Extensions. A race condition exists that could be exploited by a remote attacker who has already compromised the browser's renderer process. By crafting a malicious HTML page, the attacker could potentially execute arbitrary code outside of the browser's security...

log4j-cve-code-search-resources

使用代码搜索来帮助修复/缓解 log4j CVE-2021-44228 和 log4j CVE-2021-45046...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2026-92184

A server-side request forgery (SSRF) vulnerability exists in ag-ui-protocol ag-ui 0.3.0 , affecting the function urllib.request.urlopen in the file integrations/aws-strands/python/src/ag_ui_strands/utils.py within the Multimodal Content component. Manipulation of the argument Value enables the fl...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2026-92184 ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery

A security flaw has been discovered in ag-ui-protocol ag-ui 0.3.0. Affected is the function urllib.request.urlopen of the file integrations/aws-strands/python/src/aguistrands/utils.py of the component Multimodal Content. The manipulation of the argument Value results in server-side request forger...

CVE-2024-4323-Exploit-POC

CVE-2024-4323-Exploit-POC 此概念验证脚本演示了如何利用CVE-2024-4323（Fluent Bit中的一个内存损坏漏洞）实现远程代码执行。 CVE-2024-4323是Fluent Bit 2.0.7至3.0.3版本中的一个内存损坏漏洞。该问题存在于嵌入式HTTP服务器解析trace请求的过程中，可能导致拒绝服务（DoS）条件、信息泄露或远程代码执行（RCE）（MITRE CVE）（Launchpad）。 有关该漏洞及缓解措施的更多详情，请参阅 Mitre上的CVE-2024-4323条目 和 Tenable的公告。 Disclaimer...

CVE-2022-31629-poc

CVE-2022-31629 poc PHP Bug report 如何测试 安装 root@kitploit: git clone https://github.com/SilNex/CVE-2022-31629-poc cd ./CVE-2022-31629-poc docker-compose up -d 测试 https://localhost:8110 : v8.1.10 https://localhost:8111 : v8.1.11 Chrome HSTS 问题 在 HSTS 错误页面输入 thisisunsafe 即可。...

CVE-2026-69486

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

django-DefectDojo v3.3.100

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...