CVE-2025-52691

CVE-2025-52691 SmarterMail Build 9406 及更早版本存在任意文件上传漏洞。未认证的攻击者可以在邮件服务器上任意位置上传文件，可能导致远程代码执行。 此检测方法如何工作？ 发送 GET 请求至 /interface/root/login，通过 ng-app="smartermail" 指令确认存在 SmarterMail，从 stProductVersion JavaScript 变量中提取版本和构建号，并根据 csa.gov.sg 的警报将构建号小于或等于 9406 的实例标记为易受攻击： 该漏洞影响 SmarterMail Build 9406...

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb（版本 6.1.2.0 或更低版本）的“通知设置”功能中存在一个远程代码执行（RCE）漏洞。具有 ASWeb “系统设置”权限的已认证攻击者可以利用此漏洞在服务器上执行任意命令，从而导致系统完全受损。 要求 要成功实施攻击，攻击者需要： 能够访问版本为 6.1.2.0 或更低版本的 GV-ASManager Web 应用程序； 能够访问具有管理通知设置功能权限的账户。 影响 该漏洞可被利用来执行以下未经授权的操作 ： 拥有管理通知设置功能权限的账户能够： 执行远程代码执行攻击。...

CVE-2024-6783

CVE-2024-6783 - Vue CVE 在 Vue 中发现了一个漏洞，该漏洞允许攻击者通过原型污染（prototype pollution）执行 XSS 攻击。攻击者可以修改某些属性的原型链，例如 Object.prototype.staticClass 或 Object.prototype.staticStyle，从而执行任意 JavaScript 代码。 捐赠 通过 PayPal 或扫描下方二维码来支持本项目的维护。 ⚡ 简单用法 请仅在安全且已获授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 已获授权的渗透测试环境 示例配置：...

CVE-2025-53772-IIS-WebDeploy-RCE

CVE-2025-53772 - IIS WebDeploy RCE 漏洞利用 此仓库包含针对 CVE-2025-53772 的概念验证（PoC）漏洞利用程序，该漏洞是 IIS WebDeploy 中因不安全反序列化而导致的远程代码执行（RCE）漏洞。 ⚠️ 免责声明 此工具仅用于教育和经授权的安全测试目的。作者不对因使用本软件而造成的任何误用或损害负责。请仅在您拥有或已获得明确测试许可的系统上使用。 🔧 快速设置 1. 自定义 Payload 编辑 poc.cs 第 18-19 行中的 payload，以指定您的目标操作： csharp// Replace with your...

CVE-2025-54253-Inside-the-Adobe-AEM-Forms-Zero-Day

CVE-2025-54253: Adobe AEM-Formsのゼロデイの内部 — ペネトレーションテスターと防御担当者がすべきこと TL;DR: JEE上のAdobe Experience Manager AEM Forms（≤ 6.5.23.0）には、誤用されたStruts/OGNLエンドポイントを介して認証なしのリモートコード実行を可能にする深刻なネットワークアクセス可能な脆弱性（CVE-2025-54253）が存在しました。関連するXXE（CVE-2025-54254）は任意のファイル読み取りを可能にします。これらは影響の大きいエンタープライズ問題です —...

CVE-2026-82028

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interpolated directly into the FROM clause without...

CVE-2026-54334

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen in uefifirmware/compression/Tiano/Decompress.c reads Number from GetBitsSd, CBIT with CBIT = 9 and can obtain 511 entries for the 510-element Sd-mCLen heap...

CVE-2026-54333

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable in uefifirmware/compression/Tiano/Decompress.c does not validate that bit-length values read from a crafted Tiano or EFI compressed firmware bitstream rema...

CVE-2026-17133

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

CVE-2026-17416

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

CVE-2026-17156

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

CVE-2026-16428

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine...

CVE-2026-54334 UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen in uefifirmware/compression/Tiano/Decompress.c reads Number from GetBitsSd, CBIT with CBIT = 9 and can obtain 511 entries for the 510-element Sd-mCLen heap...

CVE-2026-54334 UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, ReadCLen in uefifirmware/compression/Tiano/Decompress.c reads Number from GetBitsSd, CBIT with CBIT = 9 and can obtain 511 entries for the 510-element Sd-mCLen heap...

CVE-2026-54334

CVE-2026-54334 is a heap out-of-bounds write in the uefi-firmware Python package's native Tiano/EFI decompressor. The flaw is in ReadCLen() within uefi_firmware/compression/Tiano/Decompress.c: it reads a 9-bit value (up to 511) and writes into the 510-element Sd->mCLen heap array without bound...

CVE-2026-54333 UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTable

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable in uefifirmware/compression/Tiano/Decompress.c does not validate that bit-length values read from a crafted Tiano or EFI compressed firmware bitstream rema...

CVE-2026-54333 UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTable

UEFI Firmware Parser parses BIOS, Intel ME, and UEFI firmware structures including volumes, file systems, and files. Prior to 1.14, MakeTable in uefifirmware/compression/Tiano/Decompress.c does not validate that bit-length values read from a crafted Tiano or EFI compressed firmware bitstream rema...

CVE-2026-54333

CVE-2026-54333 is a stack out-of-bounds write in the uefi-firmware Python package (UEFI Firmware Parser). The vulnerable function MakeTable() in uefi_firmware/compression/Tiano/Decompress.c fails to validate that bit-length values from a crafted Tiano/EFI compressed firmware bitstream stay within...

CVE-2026-82028 Magistrala < 1.0.0 SQL Injection via format Parameter in Reader API

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interpolated directly into the FROM clause without...

EUVD-2026-77810

Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader and postgres-reader HTTP API services that allows authenticated attackers to inject arbitrary SQL by supplying a malicious format query parameter that is interpolated directly into the FROM clause without...