route-detect

route-detect Find authentication authn and authorization authz security bugs in web application routes: Routes fromkoel streaming server Web application HTTP route authn and authz bugs are some of the most common security issues found today. These industry standard resources highlight the severit...

CVE-2025-46408

CVE-2025-46408 EagleEyes Lite Android 应用程序中的主机名验证不当 1. 概述 名称 : EagleEyesLite 版本 : 2.0.0 供应商 : AVTECH CWE : CWE-297: 证书与主机不匹配的不当验证 CVSS : 9.8 严重 向量字符串 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 2. 摘要 EagleEyes Lite（版本 2.0.0）通过使用 SSLSocketFactory.ALLOWALLHOSTNAMEVERIFIER 禁用了 HTTPS 通信期间的主机名验证。...

CVE-2026-32475

CVE-2026-32475 — Elementor Pro ≤ 4.2.1 未认证任意文件上传 → RCE CVE-2026-32475 （CVSS 9.0 严重，CWE-434）的 PoC：Elementor Pro Forms 模块中存在未认证的任意文件上传漏洞，可导致远程代码执行。已在 Elementor Pro 4.2.2 （2026-08-19）中修复。由 Tin Pham TF1T 通过 Patchstack 漏洞赏金计划报告。 ███████╗ █████╗ ██╗ ██╗ ███╗ ███╗ ███████╗ ███████╗ ██████╗ ██╔════╝...

CVE-2026-22599

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-22599 CVE-2026-22599 Strapi 5.33.1 - Strapi 我是 @abraxasnull。Loopback 实验环境。客户端为 CVE-2026-22599-Abraxas-Labs.py。 Content-Type Builder 写入 API 数据库查询注入。Yup 会进行校验，但不会剥离未知的 column.defaultTo。Schema builder 将 value,...

poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

NotCVE-2026-0014

摘要 产品： InputLeap v3.0.3 厂商： input-leap 漏洞： 路径遍历 CWE： CWE-22 对路径名的限制不当导致目录遍历（“路径遍历”） 描述 InputLeap 的拖放处理程序试图通过查找最后一个路径分隔符并仅保留其后的部分来清理文件名。当未找到分隔符时，C++ 字符串搜索会返回一个称为 npos 的特殊哨兵值以表示失败。然而，代码在将结果用于算术计算之前从未检查该哨兵值。由于 npos...

CVE-2026-42945

CVE-2026-42945 实际风险评估脚本 针对 CVE-2026-42945 （Nginx Rift）的本地风险评估工具。不同于直接告诉你"版本受影响就危险"，这个脚本会逐层检查真正决定风险的三个条件，给出符合你实际情况的结论。 背景 CVE-2026-42945 是 nginx ngxhttprewritemodule 中一个存在了 18 年的堆缓冲区溢出漏洞（CWE-122），CVSS 4.0 评分 9.2。但公告中有一句关键的限定： "Code execution possible on systems without ASLR protection" RCE...

cve

CVE 问题描述：Stackoverflow 我正尝试在 Docker 中构建项目，因此使用 Docker Desktop 来构建我的项目。在构建镜像时，我遇到了以下漏洞之一： CVE-2024-26308 CWE-770 7.5 H Apache Commons Compress 中存在无限制或节流资源分配漏洞。该问题影响 Apache Commons Compress 1.21 至 1.26 之前版本。建议用户升级到修复该问题的 1.26 版本。 CVSS 评分：7.5 CVSS 向量：CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

CVE-2025-5880-PoC

CVE-2025-5880 — Whistle 2.9.98 路径遍历漏洞利用PoC Whistle v2.9.98 中未经身份验证的路径遍历漏洞的 PoC 利用脚本。 漏洞概要 字段| 详情 ---|--- CVE ID| CVE-2025-5880 CWE| CWE-22（路径遍历） 受影响软件| Whistle ≤ 2.9.98 受影响端点| /cgi-bin/sessions/get-temp-file 攻击向量| 网络 —— 无需身份验证 影响| 可读取主机文件系统上的任意文件 filename...

Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request. id: CVE-2018-6605 info: name: Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection author: DhiyaneshDk severity...

EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution

EyesOfNetwork 5.1 to 5.3 contains SQL injection and remote code execution vulnerabilities. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. See also CVE-2020-8655,...

MovableType - Remote Command Injection

MovableType 5002 and earlier Movable Type Advanced 7 Series, Movable Type Advanced 6.8. 2 and earlier Movable Type Advanced 6 Series, Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified...

OpenSIS 7.3 - SQL Injection

OpenSIS Community Edition version 7.3 is vulnerable to SQL injection via the USERNAME parameter of index.php. id: CVE-2020-6637 info: name: OpenSIS 7.3 - SQL Injection author: pikpikcu severity: critical description: OpenSIS Community Edition version 7.3 is vulnerable to SQL injection via the...

Schools Alert Management Script - Arbitrary File Read

Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal. id: CVE-2018-12054 info: name: Schools Alert Management Script - Arbitrary File Read author: wisnupramoedya severity: high description: Schools Alert...

Joomla! Component PrayerCenter 3.0.2 - SQL Injection

SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429. id: CVE-2018-7314 info: name: Joomla! Component PrayerCenter 3.0.2 - SQL Injection author: DhiyaneshDK severity: critical description: | SQL Injection...

pyload - Log Injection

A log injection vulnerability was identified in pyload. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by pyload. id: CVE-2024-21645 info: name: pyload - Log Injection author: isacaya severity: medium description: | A log injection...

Joomla! JCK Editor SQL Injection

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. id: CVE-2018-17254 info: name: Joomla! JCK Editor SQL Injection author: SumanKar severity: critical description: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection vi...

Photo Gallery WordPress v1.6.3 - SQL Injection

Photo Gallery WordPress plugin v1.6.3 contains a SQL injection caused by improper escaping of $POST'filtertag' parameter in SQL queries, letting attackers execute arbitrary SQL commands, exploit requires sending crafted POST requests. id: CVE-2022-1281 info: name: Photo Gallery WordPress v1.6.3 -...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...