19 matches found
CVE-2018-19859
CVE-2018-19859 - RCE 개념 증명 이 저장소는 OpenRefine 3.1-beta에 대한 원격 코드 실행RCE 개념 증명을 포함합니다. Create Project 기능 내의 디렉터리 트래버설 취약점 CVE-2018-19859를 악용하여 악의적인 사용자가 사용자 정의 Java 확장을 업로드하여 코드 실행을 얻을 수 있습니다. 이 개념 증명은 사용자가 webroot/extension/whiteoak/로 이동할 때 활성화되는 간단한 Java 리버스 셸을 포함합니다. 설치 1. 로컬 취약 버전의 OpenRefine예: ...
CVE-2026-77393: Incorrect Default Permissions
In Ignition 8.1.53 and earlier, the Gateway "Create Project Roles" setting shipped blank, which permitted any authenticated user to create projects if they can execute gateway scripts. Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3...
PT-2026-76678
Name of the Vulnerable Software and Affected Versions UpTrain versions prior to 0.7.2 Description UpTrain is an open-source platform used to evaluate and improve generative AI applications. The /create project endpoint allows authenticated users to execute arbitrary code on the host system,...
CVE-2026-19284
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
CVE-2026-19284
MauricioMilano coder-api up to version 1.1.0 is affected by a local, command-injection vulnerability in the Projects Endpoint. The issue resides in the function createProject (src/core/projects.ts) and is triggered by input manipulation within that path. The attack is described as requiring local...
CVE-2026-19284 MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
Exploit for CVE-2026-36226
CVE-2026-36226: Advantech WebAccess/SCADA Create New Project U...
CVE-2026-6598
A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function createproject/encryptauthsettings of the file src/backend/base/Langflow/api/v1/projects.py of the component Project Creation Endpoint. Such manipulation of the argument authsetting...
Langflow 安全漏洞
Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Versions of Langflow 1.8.3 and earlier contain security vulnerabilities. These vulnerabilities stem from incorrect operations on the functions createproject and...
MAL-2025-7733 Malicious code in @create-project-container/legacy (npm)
The package @create-project-container/legacy was found to contain malicious code...
Malicious code in @sky-team/create-project-modal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c63ed97fa2890cd36683d943cad94b27fa57e5a87b9b16fa38a55970163af5a1 The OpenSSF Package Analysis project identified '@sky-team/create-project-modal' @ 99.50.55 npm as malicious. It is considered malicious because...
MAL-2024-8841 Malicious code in @sky-team/create-project-modal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c63ed97fa2890cd36683d943cad94b27fa57e5a87b9b16fa38a55970163af5a1 The OpenSSF Package Analysis project identified '@sky-team/create-project-modal' @ 99.50.55 npm as malicious. It is considered malicious because...
easy-mock 1.6.0 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: easy-mock 1.6.0 - Remote Code Execution RCE Authenticated Date: 12/08/2021 Exploit Author: LionTree Vendor Homepage: https://github.com/easy-mock Software Link: https://github.com/easy-mock/easy-mock Version: 1.5.0-1.6.0 Tested on: windows 10node v8.17.0 import requests import json...
CVE-2020-23974
Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...
Cross site scripting
Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...
CVE-2020-23974
CVE-2020-23974 affects Create-Project Manager 1.07. The issue is described as Multi Persistent Cross-site Scripting and HTML injection via UI surfaces such as Online chat, Social feed, Message(title-tag), and Add new client (all-tags). The provided documents do not specify the root cause details,...
CVE-2020-23974
Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...
CVE-2020-23974: Improper Neutralization of Input During Web Page Generation
Create-Project Manager 1.07 has Multi Persistent Cross-site Scripting and HTML injection in via Online chat, Social feed,Messagetitle-tag, Add new client all-tags...
