The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the Enlogic SCADA system “ENTEK” virtual controller, related to the use of a dangerous method or function that allows a intruder to execute arbitrary code in the operating system.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

CVE-2021-40870

CVE-2021-40870 Aviatrix の危険なタイプのファイルの無制限アップロードにより、認証済みユーザーが任意のコードを実行できます。 https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

CVE-2026-48356

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-48356 CVE-2026-48356 Magento Open Source 2.4.8-p5 — Adobe Adobe Commerce は、危険な種類のファイルの無制限アップロードの脆弱性の影響を受け、現在のユーザーのコンテキストで任意のコード実行が可能になる可能性があります。 | ---|--- CVE| CVE-2026-48356 · CVE.org CWE| CWE-434 CVSS| Critical: 9.3...

VulnFanatic-NG

VulnFanatic-NG LLM支援の脆弱性調査のための Binary Ninja プラグインです。 VulnFanatic-NG はサイドバーパネルを追加し、現在のバイナリをスキャンして、疑わしいコードが実際に脆弱かどうかを LLM（デフォルトではローカルホスト の OpenAI 互換モデル、または Anthropic Claude、Google Gemini、Azure OpenAI（LLM バックエンド を参照））に判断させます。主に Binary Ninja...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

printix-CVE-2022-29551

CVE-2022-29551 簡易版 | 印刷用 PrintixService.exe における「危険なメソッドまたは関数の公開」脆弱性（Kofax Printix の「Printix Secure Cloud Print Management」バージョン 1.3.1156.0 以下）により、ローカルまたはリモートの攻撃者が悪意のあるプリンタードライバーをインストールし、Printix サービスを通じて実行できるようになります。攻撃者はこれを利用して、悪意のあるドライバーコードをリモートで実行し、権限をシステムにまで昇格させることができます。...

CVE-2024-31351_wordpress_exploit

Wordpress - Copymatic – AI Content Writer & Generator = 1.6 - 認証なし任意ファイルアップロード CVE-2024-31351 Copymatic Copymatic – AI Content Writer & Generator における危険なタイプのファイルの無制限アップロードの脆弱性。この問題はCopymatic – AI Content Writer & Generator: n/a から 1.6 までに影響します。 詳細なエクスプロイトや限定エクスプロイトについては、Telegramの @KtN1990...

CVE-2025-53964

CVE-2025-53964 リスク評価 CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 説明 GoldenDict 1.5.0 および 1.5.1 には、ユーザーが細工された辞書を追加し、 その辞書に含まれる任意の用語を検索すると、ファイルの読み取りおよび変更が可能になる、公開された危険なメソッドがあります。 追加情報 この製品は外部の主体との対話のためのインターフェースを提供します。GoldenDict ver. 1.5.0、1.5.1...

Exploit for Unrestricted Upload of File with Dangerous Type in Glpi-Project Glpi

CVE-2025...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

whispers

Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...

Weggli_rules_SSTIC2023

ここに厳選されたweggliクエリのリストがあります これらは1つずつ読んで使用することも、バッチで起動することもできます： 使用方法： $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ カテゴリは3つあります： 1. 危険な関数：strcpy、systemなど.. 2. スタック：スタック上などのコピーを検出しようとします.. 3. malloc：malloc関数のオーバーフローを見つけます これらは自己文書化されているので、読むことができます。...

CVE-2026-76144 Genians, Inc Genian SSL PNS Unrestricted File Upload

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

CVE-2026-76144 Genians, Inc Genian SSL PNS Unrestricted File Upload

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

CVE-2026-102137 Kiteworks Core Unrestricted Upload of File with Dangerous Type

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file...

CVE-2026-102137

In Kiteworks Core , an authenticated administrator can bypass content validation during an administrative file upload. This allows for the storage of files containing dangerous content on the appliance. While this vulnerability enables the storage of malicious files, it does not directly result i...