698 matches found
CVE-2023-41425-wonderCMS_RCE
CVE-2023-41425-wonderCMSRCE Wonder CMS v.3.2.0 至 v.3.4.2 版本中存在跨站脚本（XSS）漏洞，允许远程攻击者通过上传到 installModule 组件的恶意脚本执行任意代码。 仅用于教育目的 需要知道 loginURL、拥有管理员访问权限，或能够诱使管理员点击 XSS 链接。 1. 克隆仓库 root@kitploit: git clone https://github.com/thefizzyfish/CVE-2023-41425-wonderCMSRCE.git 2. 运行 root@kitploit: usage:...
CVE-2024-31666
漏洞概述 Flusity-CMS v.2.33 中存在一个漏洞，允许远程攻击者通过精心构造的脚本在 editaddonpost.php 组件中执行任意代码。 影响版本 Flusity-CMS v.2.33 漏洞细节 攻击者可以通过向 editaddonpost.php 组件发送精心构造的脚本来利用该漏洞，从而在目标服务器上执行任意代码。 影响 此漏洞可能会导致攻击者在服务器上执行任意代码，从而可能控制整个服务器。 发现者：胡诗雅...
VulnCheck KEV: CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
...
Linux Distros Unpatched Vulnerability : CVE-2026-38753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
Linux Distros Unpatched Vulnerability : CVE-2026-38752
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK...
AZL-92835 CVE-2026-38752 affecting package busybox for versions less than 1.36.1-26
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
DEBIAN-CVE-2026-38752
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38752
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38753
A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
CVE-2026-38753
A use-after-free in the awksub function editors/awk.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...
JLSEC-2026-556
Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
JLSEC-2026-558
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...
PT-2026-47116
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...
PT-2026-47115
Stack overflow in lua resume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...
EUVD-2023-31489
An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file...
PT-2026-37629
Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...
CVE-2026-30603
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
CVE-2026-30603
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card...
CVE-2026-25983
A flaw was found in ImageMagick. A remote attacker could exploit a heap-use-after-free UAF vulnerability by providing a specially crafted MSL script. This vulnerability occurs when the operation element handler replaces and frees an image while the parser continues to read from it. Successful...