297051 matches found
Security Bulletin: SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7253)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the SQL injection vulnerability. Vulnerability Details CVEID:CVE-2026-7253 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send speciall...
CVE-2024-29895
CVE-2024-29895 Cacti CVE-2024-29895 POC Una vulnerabilità di command injection consente a qualsiasi utente non autenticato di eseguire comandi arbitrari sul server quando l'opzione registerargcargv di PHP è On. https://github.com/Cacti/cacti/security/advisories/GHSA-cr28-x256-xf5m Uso: app -m...
CVE-2026-76943 Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...
CVE-2026-76943
CVE-2026-76943 affects the Xiiaozet LK100W (LK100Wt) device, which contains an authentication weakness in an administrative service that allows an attacker to bypass access controls and obtain command execution capabilities. Successful exploitation could lead to unauthorized interaction with priv...
CVE-2026-76943 Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel
Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...
Malicious code in flyteplugins-redis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 785b972da662fb9bf37532e8607149e096679239dbd373dc18406df647564c03 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-14584 Malicious code in flyteplugins-redis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 785b972da662fb9bf37532e8607149e096679239dbd373dc18406df647564c03 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-14583 Malicious code in flyteplugins-nsight (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 46b08f15350f8ecf5aabe4633458f517dda24d5eb2687ab95680dc068cf2f129 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in flyteplugins-nsight (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 46b08f15350f8ecf5aabe4633458f517dda24d5eb2687ab95680dc068cf2f129 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-14581 Malicious code in flyteplugins-agento11y (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 46ad72ab2f7b1b228296686a3090c2c81be3a2257b47fa801b300c1f7b66c09a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in flyteplugins-agento11y (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 46ad72ab2f7b1b228296686a3090c2c81be3a2257b47fa801b300c1f7b66c09a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in flyteplugins-echo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e40fe85c793ea410384a1c17184e6f7fe08f039a19599b9fb9933cda4078b85c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-14582 Malicious code in flyteplugins-echo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e40fe85c793ea410384a1c17184e6f7fe08f039a19599b9fb9933cda4078b85c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
exploit-CVE-2018-15139
Exploit di OpenEMR CVE-2018-15139 OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples:...
CVE-2026-78037
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface . An authenticated attacker can execute arbitrary operating system commands with elevated privileges, potentially leading to unauthorized access to sensitive information or complete device compromise ...
CVE-2026-78037 Xiiaozet LK100W OS Command Injection
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...
CVE-2026-78037 Xiiaozet LK100W OS Command Injection
Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...
Serverless-Top-10-Project
OWASP Serverless Top 10 Panoramica Quando si adotta un'architettura serverless, si elimina la necessità di sviluppare un server per gestire la propria applicazione. In questo modo, si trasferiscono anche alcune delle minacce alla sicurezza al fornitore dell'infrastruttura. Oltre ai molti vantaggi...
asadbg
asadbg Nota preliminare: ti consigliamo di usarlo come parte di asatools ma può essere usato anche autonomamente. asadbg è un framework di strumenti che aiuta ad automatizzare il debug in tempo reale di dispositivi Cisco ASA, oltre ad automatizzare l'interazione con la CLI Cisco via seriale/ssh p...
argumentinjectionhammer
Argument Injection Hammer Argument Injection Hammer ist eine Erweiterung für den Intercepting Proxy Burp Suite, die die Fähigkeit des Scanners erweitert, Argument Injection und Manipulationsschwachstellen in Webanwendungen und Webdiensten zu erkennen. Eine Webanwendung ist anfällig für Argument...