59 matches found
MANSPIDER
MANSPIDER Crawl SMB shares for juicy information. File content searching + regex is supported! What's New in v2.0 Manspider 2.0 is here! This brings significant improvements: New and improved text extraction powered by Kreuzberg - now supporting PDF, DOCX, XLSX, PPTX, images with OCR, and many...
CVE-2026-69083_exploit
CVE-2026-69083 — SiYuan 未認証SQLインジェクション SiYuan（Goベースのナレッジベースアプリ）のアセットコンテンツ検索エンドポイントにおける未認証SQLインジェクション。 POST /api/search/fullTextSearchAssetContent は、ユーザーが制御する query 値をエスケープなしでREGEXP句に直接連結して、生のSQL文を構築します（kernel/model/assetcontent.go、assetContentFieldRegexp）： root@kitploit: SELECT FROM...
Exploit for CVE-2026-69083
CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthe...
The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software exists because measures to protect the website structure have not been taken. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...
The vulnerability of the Content Search module in the ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, allows a violator to trigger a service outage.
The vulnerability of the Content Search module in the ManageEngine Exchange Reporter Plus monitoring, analysis, and reporting tool is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service...
CVE-2025-65837
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
CVE-2025-65837
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
CVE-2025-65837
PublicCMS version V5.202506.b is vulnerable to Cross Site Scripting (XSS) within its Content Search module . The flaw allows for the injection of malicious scripts through the content search functionality due to improper neutralization of input during web page generation. No information regarding...
PublicCMS 安全漏洞
PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS version V5.202506.b. The vulnerability stems from the content search module being susceptible to cross-site scripting attacks...
CVE-2025-65837: Improper Neutralization of Input During Web Page Generation
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
CVE-2025-65837
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
CVE-2025-65837
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
PT-2025-52683
Name of the Vulnerable Software and Affected Versions PublicCMS version 5.202506.b Description PublicCMS version 5.202506.b has a Cross Site Scripting XSS issue in the Content Search module. The issue allows for the injection of malicious scripts through the Content Search functionality. The...
CVE-2025-65837
PublicCMS V5.202506.b is vulnerable to Cross Site Scripting XSS in the Content Search module...
Adobe Experience Manager (AEM) CRX Search Endpoint Exposure
The remote Adobe Experience Manager AEM CRX search endpoint is accessible. These endpoints provide potential attackers with access to search functionalities, which could be exploited to discover sensitive internal resources. No source data...
EUVD-2018-11524
Malware in sbrugna...
SUSE CVE-2025-4981
Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequence...
The vulnerability of the Content Search module of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus allows a hacker to execute arbitrary code.
The vulnerability of the Content Search module in the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus relates to the unlimited download of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...