Lucene search
+L

37 matches found

Kitploit
Kitploit
added 2026/09/15 1:26 a.m.26 views

CVE-2024-4577-RCE-ATTACK

PHP CVE-2024-4577-RCE-ATTACK-ATTACK 📜 설명 PHP 8.1.8.1.29 미만, 8.2.8.2.20 미만, 8.3.8.3.8 미만 버전에서 Windows의 Apache 및 PHP-CGI를 사용할 때 시스템이 특정 코드 페이지를 사용하도록 설정된 경우, Windows는 Win32 API 함수에 제공된 명령줄에서 문자를 대체하기 위해 "Best Fit" 동작을 사용할 수 있습니다. PHP CGI 모듈은 해당 문자를 PHP 옵션으로 잘못 해석할 수 있으며, 이로 인해 악의적인 사용자가 실행 중인 PHP...

9.8CVSS7.3AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/14 5:18 p.m.11 views

CVE-2024-4577-checker

CVE-2024-4577 脆弱性チェッカー CVE-2024-4577 脆弱性チェッカーは、PHP-CGI における CVE-2024-4577 の脆弱性を複数のドメインに対してスキャンするために設計された Bash スクリプトです。このツールを使用すると、セキュリティ研究者やシステム管理者は、自身のシステムやドメインリストがこの特定のセキュリティ問題に対して潜在的に脆弱かどうかを迅速に評価できます。 説明 PHP バージョン 8.1. で 8.1.29 未満、8.2. で 8.2.20 未満、8.3. で 8.3.8 未満において、Windows 上で Apache と PHP-CG...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/14 1:15 p.m.5 views

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - PHP CGI 引数インジェクション リモートコード実行 RCE 特定のバージョンのPHP(8.1. 8.1.29未満、8.2. 8.2.20未満、8.3. 8.3.8未満)において、Windows上でApacheとPHP-CGIを使用する場合に深刻な脆弱性が存在します。システムが特定のコードページを使用するように設定されている場合、Windowsの「Best-Fit」動作により、Win32...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
NVD
NVD
added 2026/02/10 4:16 p.m.12 views

CVE-2025-15572

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer a...

5.5CVSS0.00164EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/02/10 3:32 p.m.44 views

CVE-2025-15572 wasm3 NewCodePage memory leak

A vulnerability has been found in wasm3 up to 0.5.0. The affected element is the function NewCodePage. The manipulation leads to memory leak. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Unfortunately, the project has no active maintainer a...

4.8CVSS0.00164EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.15 views

Wasm3 安全漏洞

Wasm3 is an open-source, fast WebAssembly interpreter and the most versatile WASM runtime. Versions of Wasm3 prior to 0.5.0 have security vulnerabilities, which stem from a memory leak in the NewCodePage function...

5.5CVSS5.8AI score0.00164EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2026/01/07 9:39 a.m.18 views

CVE-1999-0725

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page"...

7.1CVSS7.3AI score0.24852EPSS
SaveExploits1References1
CVE
CVE
added 2025/12/13 3:20 a.m.41 views

CVE-2025-14056

CVE-2025-14056 concerns the WordPress plugin Custom Post Type UI. It is a Stored Cross-Site Scripting (XSS) via the 'label' parameter during import, affecting all versions up to 1.18.1. An authenticated attacker with Administrator-level access can inject scripts that execute on the Tools → Get Co...

4.4CVSS4.8AI score0.00295EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/13 3:20 a.m.11 views

CVE-2025-14056 Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter

The Custom Post Type UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'label' parameter during custom post type import in all versions up to, and including, 1.18.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

4.4CVSS6.1AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 7:28 a.m.13 views

CVE-2024-24701

Cross-Site Request Forgery CSRF vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20...

8.8CVSS6.3AI score0.00277EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/07 12:00 a.m.9 views

PHP 操作系统命令注入漏洞

PHP is a scripting language for PHP that executes on the server side. A security vulnerability exists in PHP versions prior to 8.1.29, prior to 8.2.20, and prior to 8.3.8, which stems from a misconfiguration when using a Windows code page with a non-standard configuration that points to the OEM...

8.8CVSS7.1AI score0.03662EPSS
SaveExploits69References6
AlpineLinux
AlpineLinux
added 2024/10/02 2:16 p.m.19 views

CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

6.3CVSS7.8AI score0.00756EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/20 8:11 p.m.11 views

CVE-2024-41658 GHSL-2024-036: Reflected XSS in QrCodePage.js

Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...

6.1CVSS6.2AI score
SaveExploits0References4
NVD
NVD
added 2024/02/29 1:44 a.m.45 views

CVE-2024-24701

Cross-Site Request Forgery CSRF vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20...

8.8CVSS4.6AI score0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/29 1:44 a.m.10 views

CVE-2024-24701

Cross-Site Request Forgery CSRF vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20...

8.8CVSS7.3AI score0.00277EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/29 1:44 a.m.33 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20...

4.3CVSS7.2AI score0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/28 4:16 p.m.20 views

CVE-2024-24701 WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Native Grid LLC A no-code page builder for beautiful performance-based content.This issue affects A no-code page builder for beautiful performance-based content: from n/a through 2.1.20...

4.3CVSS7AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2024/02/28 4:16 p.m.131 views

CVE-2024-24701

CVE-2024-24701 is a CSRF vulnerability in Setka Editor (WordPress plugin: setka-editor)

8.8CVSS6.3AI score0.00277EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.19 views

PT-2024-20497 · Native Grid Llc +2 · A No-Code Page Builder For Beautiful Performance-Based Content +2

Name of the Vulnerable Software and Affected Versions: A no-code page builder for beautiful performance-based content versions n/a through 2.1.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performin...

8.8CVSS9.3AI score0.00277EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/10/09 12:00 a.m.34 views

PortlandLabs Concrete CMS SEO-Extra Feature Cross-Site Scripting Vulnerability

PortlandLabs Concrete CMS is a team-oriented open source content management system of the United States PortlandLabs company . A cross-site scripting vulnerability exists in the PortlandLabs Concrete CMS SEO-Extra feature, which can be exploited by an attacker to execute arbitrary code via a...

4.8CVSS6.7AI score0.00558EPSS
SaveExploits1References1
Rows per page
Query Builder