MANSPIDER

MANSPIDER 爬取SMB共享以获取敏感信息。支持文件内容搜索+正则表达式！ v2.0 新特性 MANSPIDER 2.0 来了！ 带来了重大改进： 全新改进的文本提取 ，基于 Kreuzberg 实现——现在支持 PDF、DOCX、XLSX、PPTX、带 OCR 的图片以及更多格式 现代化包管理 ，借助 uv 实现更快、更可靠的安装 Python 3.14 支持 ——为最新的 Python 版本做好准备 日期过滤 ——通过 --modified-after 和 --modified-before 按修改日期搜索文件 全面的单元测试 ——提高了可靠性和稳定性 支持的文件类型： PDF...

CVE-2026-69083_exploit

CVE-2026-69083 — Inyección SQL no autenticada en SiYuan Inyección SQL no autenticada en SiYuan una aplicación de base de conocimiento basada en Go a través del endpoint de búsqueda de contenido de assets. POST /api/search/fullTextSearchAssetContent construye una sentencia SQL cruda concatenando e...

Exploit for CVE-2026-69083

CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthe...

The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software exists because measures to protect the website structure have not been taken. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of the Content Search module in the ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, allows a violator to trigger a service outage.

The vulnerability of the Content Search module in the ManageEngine Exchange Reporter Plus monitoring, analysis, and reporting tool is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service...

CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b. The vulnerability stems from the content search module being susceptible to cross-site scripting attacks...

CVE-2025-65837

PublicCMS version V5.202506.b is vulnerable to Cross Site Scripting (XSS) within its Content Search module . The flaw allows for the injection of malicious scripts through the content search functionality due to improper neutralization of input during web page generation. No information regarding...

CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

CVE-2025-65837

PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...

PT-2025-52683

Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b has a Cross Site Scripting XSS issue in the Content Search module. The issue allows for the injection of malicious scripts through the Content Search functionality. The...

Adobe Experience Manager (AEM) CRX Search Endpoint Exposure

The remote Adobe Experience Manager AEM CRX search endpoint is accessible. These endpoints provide potential attackers with access to search functionalities, which could be exploited to discover sensitive internal resources. No source data...

EUVD-2018-11524

Malware in sbrugna...

SUSE CVE-2025-4981

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequence...

The vulnerability of the Content Search module of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus allows a hacker to execute arbitrary code.

The vulnerability of the Content Search module in the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus relates to the unlimited download of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...

CVE-2025-3835

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module...