828228 matches found
Apache Solr DataImportHandler <8.2.0 - Remote Code Execution
Apache Solr is vulnerable to remote code execution vulnerabilities via the DataImportHandler, an optional but popular module to pull in data from databases and other sources. The module has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug...
Flatpress < 1.3 - Path Traversal
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. id: CVE-2023-0947 info: name: Flatpress 1.3 - Path Traversal author: r3Y3r53 severity: critical description: | Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. impact: | Unauthenticated attackers ca...
CyberPanel 2.4.3-2.4.5 - AI Scanner Debug Disclosure
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, target domains, and account metadata. Unauthenticated attackers can enumerate panel administrators and recent scanner activity t...
Devika - Local File Inclusion
A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerability is due to improper handling of the 'snapshotpath' parameter in the '/api/get-browser-snapshot' endpoint. An attacker can exploit this vulnerability by crafting a request with...
Changedetection.io RSS Single Watch - Cross-Site Scripting
changedetection.io 0.54.1 contains a stored XSS caused by unescaped reflection of UUID path parameter in RSS single-watch endpoint, letting remote attackers execute JavaScript in victim's browser, exploit requires victim to visit crafted URL. id: CVE-2026-27645 info: name: Changedetection.io RSS...
GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
GitLab CE/EE contains an unauthenticated arbitrary file read. Workhorse, the reverse proxy in front of Rails, matches upload routes using EscapedPath and path.Clean without decoding percent sequences, while Puma decodes them before routing to Grape. Appending a trailing slash to commits or...
Microweber < V.2.0 - Cross-Site Scripting
Reflected Cross-Site Scripting Vulnerability in types GET parameter on the /editortools/rteimageeditor endpoint. id: CVE-2023-5244 info: name: Microweber V.2.0 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | Reflected Cross-Site Scripting Vulnerability in types GET paramete...
cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
A flaw was found in cjose. When encrypting a JSON Web Encryption JWE object using AES-CBC-HMAC algorithms, the library initializes the encryption key with all-zero bytes instead of generating a secure random key. As a result, an attacker who intercepts the encrypted message can decrypt sensitive...
CGA-H2X3-4Q93-C6GR
Bulletin has no description...
CGA-FH4Q-5FVJ-476C
Bulletin has no description...
CGA-6779-9CP3-JPCM
Bulletin has no description...
CGA-JPVQ-R4W2-G7MG
Bulletin has no description...
CGA-7PF3-FP5W-9GJ9
Bulletin has no description...
CGA-FXQW-CH46-6386
Bulletin has no description...
CGA-93MJ-PJ78-FG8X
Bulletin has no description...
CGA-3CM9-HHCJ-9Q57
Bulletin has no description...
Active-Directory-Health-Check
🛡️ Active Directory Health Check v2.6 🇩🇪 Deutsch | 🇬🇧 English A comprehensive PowerShell script for automated health and security checking of an Active Directory environment. With best-practice assessment, color-coded HTML report, and CSV export. 🇩🇪 Deutsch 📑 Table of Contents Features The 54...
Hash-Eye
🔍 HashEye - Advanced Hash Type Detection Tool HashEye is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats, security levels, entropy analysis, and pattern detection. Powered byIsaac Security Labs 🔗 Links: GitHub:...
CVE-2020-17518
CVE-2020-17518 Apache Flink RESTful API Arbitrary File Upload via Directory Traversal Apache Flink is a framework and distributed processing engine for stateful computations over unbounded and bounded data streams which developed using Java and Scala. A REST handler which was introduced in Apache...