626546 matches found
CVE-2026-59659 Multiple vulnerabilities in the Repasat application
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomZonaGeo” parameter is affected – endpoint “/es/geozones/update/149979”...
EUVD-2026-91385
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomZonaGeo” parameter is affected – endpoint “/es/geozones/update/149979”...
CVE-2026-59659
The Repasat application contains a Cross-Site Scripting (XSS) vulnerability. The flaw is located in the "nomZonaGeo" parameter at the "/es/geozones/update/149979" endpoint. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within the victim's browser. N...
apache-cve-2021-42013-lab
Apache HTTP Server 2.4.49 Path Traversal 및 원격 코드 실행 CVE-2021-42013 프로젝트 소개 이 프로젝트에서는 Apache HTTP Server 2.4.49 버전에 존재하는 CVE-2021-42013 취약점을 Docker를 사용하여 구축한 실습 환경에서 시연했습니다. 목표는 취약점이 어떻게 발생하는지, 어떻게 작동하는지, 시스템에 미치는 영향을 통제된 환경에서 분석하는 것입니다. 본 연구는 교육 및 실습 목적으로만 준비되었습니다. 사용된 기술 Docker Ubuntu 22.04 Apac...
Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230
CVE-2026-20230 Cisco Unified Communications Manager SSRF 任意文件書き込みからRCEへのPoC導出プロセスと考察 適用範囲：ローカルターゲット、許可された再現環境、脆弱性検証、防御ルール分析のみ。未承認のターゲットに対して使用しないこと。本記事は主にCVE-2026-20230の攻撃チェーン、検証可能な現象、判断ロジック、防御の考え方を分析するものであり、直接コピーして実行可能な攻撃パケット、WebShellの内容、コマンド実行ペイロードは提供しない。 1. 脆弱性の背景 CVE-2026-20230は、Cisco Unified...
CVE-2026-59669
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...
CVE-2026-59671
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesdatatable” is affected...
EUVD-2026-91332
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTipoCli” parameter is affected – endpoint “/es/clientypes/update/109441”...
CVE-2026-59673
The Repasat application is vulnerable to a Cross-Site Scripting (XSS) vulnerability. Specifically, the "nomTipoCli" parameter at the "/es/clientypes/update/109441" endpoint is affected. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within the victim...
CVE-2026-59673 Multiple vulnerabilities in the Repasat application
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTipoCli” parameter is affected – endpoint “/es/clientypes/update/109441”...
EUVD-2026-91331
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...
CVE-2026-59672
The Repasat application is subject to a Cross-Site Scripting (XSS) vulnerability. The root cause is linked to the "nomGrupoEmpresarial" parameter at the "/es/corporategroups/update/246" endpoint. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within ...
CVE-2026-59672 Multiple vulnerabilities in the Repasat application
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomGrupoEmpresarial” parameter is affected – endpoint "/es/corporategroups/update/246”...
CVE-2026-59671 Multiple vulnerabilities in the Repasat application
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesdatatable” is affected...
EUVD-2026-91328
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesdatatable” is affected...
CVE-2026-59671
The Repasat application is affected by a Cross-Site Scripting (XSS) vulnerability. The specific affected endpoint is “/es/datatables/getemployeetypesdatatable” . Successful exploitation could allow an attacker to trick a user into executing arbitrary code within the victim’s browser. No specific ...
CVE-2026-59671 Multiple vulnerabilities in the Repasat application
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The endpoint “/es/datatables/getemployeetypesdatatable” is affected...
httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias
A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...
httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects
A flaw was found in Apache HTTP Server. An attacker could achieve unintended code execution when an internal redirect generated by a Common Gateway Interface CGI program points to a non-executable file. If the target file resides in a directory configured for CGI execution and lacks a file...
