CVE-2026-92719

Quickwit through 0.9.0 fails to validate the host and scheme of the queueurl parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary internal addresses. Attackers can supply a malicious queueurl to the create-source API to scan internal networks and...

nexts-cve-2025-66478-exploit

これは、create-next-app で作成された Next.js プロジェクトです。 はじめに まず、開発サーバーを起動します： root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev ブラウザで http://localhost:3000 を開くと、結果を確認できます。 app/page.tsx を変更することでページの編集を開始できます。ファイルを編集すると、ページは自動的に更新されます。 このプロジェクトは、Vercel 用の新しいフォントファミリーである Geist...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 SourceCodester Simple Cold Storage Management System 1.0에서 취약점이 발견되었으며 문제가 있는 것으로 분류되었습니다. 이 문제의 영향을 받는 것은 Create User Handler 구성 요소의 /csms/admin/?page=user/list 파일의 알려지지 않은 일부 기능입니다. First Name/Last Name 인수의 조작은 크로스 사이트 스크립팅으로 이어집니다. 공격은 원격으로 실...

CVE-2024-46982-NUCLEI

これは、create-next-app を使用して構築された Next.js プロジェクトです。 はじめに まず、開発サーバーを起動します: root@kitploit: npm run dev or yarn dev or pnpm dev or bun run dev http://localhost:3000 をブラウザで開くと、結果が表示されます。 pages/index.js を変更することでページの編集を開始できます。ファイルを編集すると、ページは自動的に更新されます。 API ルート は http://localhost:3000/api/hello...

cve-2024-3435

これは create-next-app でブートストラップされた Next.js プロジェクトです。 はじめに まず、開発サーバーを起動します: root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev ブラウザで http://localhost:3000 を開くと、結果が表示されます。 app/page.tsx を編集することでページの編集を開始できます。ファイルを編集すると、ページは自動的に更新されます。 このプロジェクトでは、next/font を使用して、カスタム Google フォントである Inter...

CVE-2026-22444

CVE-2026-22444 Apache Solr UNC パス検証の脆弱性 概要 CVE-2026-22444 は Apache Solr に影響を与えるセキュリティ脆弱性であり、2026 年 1 月 20 日頃に公開されました。この脆弱性は、Apache Solr の "create core" API における一部の API パラメータの入力検証不足（CWE-20: Improper Input Validation）に起因し、攻撃者が Solr が "standalone"...

CVE-2026-87152

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

CVE-2026-83348

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create DB Link privilege with network access via Oracle Net to compromise RDBM...

CVE-2026-83272

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromis...

CVE-2026-83160

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

CVE-2026-87152

Oracle Installed Base (a component of Oracle E-Business Suite , specifically the Create Item Instance feature) contains an easily exploitable vulnerability in versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit it without user interaction to achiev...

EUVD-2026-79807

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Create Item Instance. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base...

EUVD-2026-79701

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create DB Link privilege with network access via Oracle Net to compromise RDBM...

CVE-2026-83272

A high-severity (CVSS 3.1: 8.5 ) vulnerability exists in the Oracle Text component of Oracle Database Server , affecting versions 19.3–19.32 , 21.3–21.23 , and 23.4.0–23.26.3 . A low-privileged attacker holding the Create Index privilege can exploit this over Oracle Net (high attack complexity) t...

EUVD-2026-79624

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnerability allows low privileged attacker having Create Index privilege with network access via Oracle Net to compromis...

CVE-2026-90931

LaraDashboard versions 0.9.0 through 1.2.2 are affected by a stored XSS vulnerability caused by failure to sanitize SVG file content during media upload. An authenticated user with only the media.create permission can upload a malicious SVG file containing embedded script tags. When any user—incl...

CVE-2026-77181 Apache Syncope: ClientApp update entitlement not effective

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

CVE-2026-77181

CVE-2026-77181 is an Incorrect Authorization vulnerability in Apache Syncope . The root cause is that the ClientApp update entitlement is not effectively enforced: the create entitlement is checked for both create and update operations on ClientApp, allowing an administrator who only holds the cr...

Astra Linux – Vulnerability in PostgresSQL 11

In the extension script, a SQL injection vulnerability was detected in PostgreSQL when the symbols @extowner@, @extschema@, or @extschema:...@ were used within quotation marks either dollar quotes, '', or other forms of quotation marks. If an administrator has installed files from a vulnerable,...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are subject to an IntegerOverflow issue, which leads to an Out-of-Bound Write Vulnerability in the gdiCreateSurface function. This issue only affects FreeRDP-based clients...