54425 matches found
CVE-2025-51863
CVE-2025-51863 Описание уязвимости ChatGPTUtil — это чат-бот-ассистент на базе ИИ, предоставляющий доступ как к ChatGPT, так и к генератору изображений на основе ИИ. В чат-компоненте существует уязвимость Self Cross-Site Scripting Self-XSS. Это может привести к краже cookie-файлов и, как следстви...
CVE-2025-70515
The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data. The lack of sanitization allows for the injection of HTML which can be used to execute malicious JavaScript code on any target browser which renders the device log...
CVE-2018-2628-MultiThreading
Vulnérabilité de désérialisation du composant central WLS de WebLogic CVE-2018-2628 Utilisation : Placer les « ip:port » à détecter dans le fichier url.txt situé dans le même répertoire. Exécuter ensuite : modifier le nombre de threads à la ligne 93 du code python CVE-2018-2628-MultiThreading.py...
CVE-2023-46805_CVE-2024-21887
CVE-2023-46805 Une vulnérabilité de contournement d'authentification dans le composant Web d'Ivanti ICS 9.x, 22.x et Ivanti Policy Secure permet à un attaquant distant d'accéder à des ressources restreintes en contournant les contrôles. utilisation: ./CVE-2023-46805.sh https://fqdn:port...
firefox: thunderbird: Privilege escalation in the DOM: Workers component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
firefox: Sandbox escape due to use-after-free in the DOM: Security component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...
firefox: Use-after-free in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
firefox: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...
firefox: Use-after-free in the Audio/Video component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
cve-2025-38001
cve-2025-38001...
Dependency Scanning
Composant pour l'analyse des dépendances et des licences Ce composant génère un CycloneDX Software Bill of Materials BOM, qui est utilisé par GitLab pour identifier les dépendances d'un projet et leurs licences. Ce CycloneDX Software Bill of Materials est compatible avec la taxonomie GitLab. De...
CVE-2026-105139
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
joomla-cve-2018-6396
Joomla-CVE-2018-6396 Компонент Joomla! Google Map Landkarten PoC cve-2018-6396...
CVE-2026-105139
The Obot platform (versions 0.26.0 before 0.26.2 ) contains an authorization bypass vulnerability. The root cause is that vMCP profiles were only enforced on tools, failing to restrict access to other elements. This allows authenticated users matching any vMCP profile to access prompts , resource...
EUVD-2026-94310
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2025-29306
POC - CVE-2025-29306 Уязвимость выполнения кода FOXCMS /images/index.html Обзор Проблема в FoxCMS v.1.2.5 позволяет удалённому злоумышленнику выполнять произвольный код через страницу отображения случаев в компоненте index.html. Полный POC Читайте об этом — CVE-2025-29306 Отказ от ответственности...