CVE-2025-6713

CVE-2025-6713 Creación de un pipeline de agregación para acceder a datos sin la autorización adecuada debido al manejo incorrecto de $mergeCursors en MongoDB v8.0 v7.0 v6.0 6.0.22 instalación no es muy difícil, solo usa pip3 para instalar los requisitos: pip install -r requirements uso...

CVE-2023-30092

CVE-2023-30092 جميع التفاصيل حول CVE-2023-30092 البرمجيات: Online Pizza Ordering System 1.0 رابط البرمجيات: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html نوع الثغرة: SQL Injection المكوّن المتأثر: QTY Parameter الأثر رفض الخدمة: صحيح الأثر تنفيذ...

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: uma vulnerabilidade de alta gravidade "run-as any app" que afeta as versões 12 e 13 do Android Script de Exploração CVE-2024-0044 Este script Bash demonstra como explorar o CVE-2024-0044. Apenas para fins educacionais e de teste. Pré-requisitos ADB Android Debug Brid...

CVE-2022-21661-Technical-Analysis

Übersicht über CVE-2022-21661 CVE-2022-21661 ist eine SQL-Injection-Schwachstelle in WordPress, die speziell Versionen vor 5.8.3 betrifft. Diese Schwachstelle entsteht durch unzureichende Bereinigung in der WPQuery-Klasse, die für benutzerdefinierte Datenbankabfragen verwendet wird. Es handelt si...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Controlla tutte le tue app heroku per verificare se stanno eseguendo una versione vulnerabile di Rails Contesto Una grave vulnerabilità di sicurezza è stata trovata nel framework Ruby on Rails. Questo exploit colpisce quasi tutte le applicazioni che eseguono versioni di Rails...

cve-2023-1874

CVE-2023-1874 Aviso Legal ESTE SCRIPT FOI PROJETADO APENAS PARA FINS EDUCACIONAIS E DE WHITE HAT. QUALQUER USO DESTE SCRIPT CONTRA UM DISPOSITIVO QUE VOCÊ NÃO ESTEJA AUTORIZADO A TESTAR OU QUE NÃO POSSUA É DE SUA TOTAL RESPONSABILIDADE. O AUTOR DESTE SCRIPT NÃO SE RESPONSABILIZA POR NADA QUE VOCÊ...

CVE-2025-55575

smm-panel-sqliCVE-2025-55575 Zeitbasierte SQL-Injection-Erkennung für SMM Panel Übersicht Diese Vorlage erkennt eine zeitbasierte SQL-Injection -Schwachstelle im Parameter servicedetail des SMM Panels über HTTP-POST-Anfragen an /ajaxdata. Ausnutzung kann es entfernten Angreifern ermöglichen, auf...

CVE-2024-4879

CVE-2024-4879 Massenscanning-Tool für die ServiceNow CVE-2024-4879-Schwachstelle. Übersicht Dieses Tool wurde entwickelt, um die ServiceNow CVE-2024-4879-Schwachstelle in großen Mengen zu scannen. Es ist inspiriert von der Sicherheitsforschung von Assetnote, die die kürzlich entdeckten...

CVE-2026-3235

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...

CVE-2026-3235

The WP Data Access plugin for WordPress is vulnerable to an unauthenticated Insecure Direct Object Reference (IDOR) in all versions up to and including 5.5.68 . The flaw resides in the check_app_access function, where a mismatch between the authorization check (performed against app_id) and the d...

EUVD-2026-66407

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...

CVE-2025-51970

CVE-2025-51970 CVE-2025-51970 - Injeção SQL no Online Shopping System Advanced Resumo Uma vulnerabilidade crítica de Injeção SQL foi descoberta no projeto Online Shopping System Advanced por PuneethReddyHC. A falha reside em action.php, que não sanitiza adequadamente a entrada do usuário...

CVE-2021-27905

CVE-2021-27905 Server Side Request Forgery SSRF di Apache Solr ReplicationHandler Hit Counter Apache Solr che sta per Searching On Lucene with Replication è un motore di ricerca gratuito e open-source basato sulla libreria Apache Lucene. Scritto in Java. Apache Solr dispone di API RESTful XML/HTT...

nextcloud_android

Nextcloud Android-App Codacy Badge Der Android-Client fürNextcloud. Arbeite einfach mit deinen Daten auf deiner Nextcloud. Wie du beitragen kannst Wenn du zu Nextcloud beitragen möchtest, bist du herzlich willkommen: auf unseren IRC-Kanälen und auf freenode unserem Forum unter...

WordPress WP Data Access plugin <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access vulnerability

Unauthenticated Insecure Direct Object Reference to Data Access vulnerability discovered by type5afe in WordPress Plugin WP Data Access versions = 5.5.68...

WordPress Simple Job Board - Unauthorized Data Access

The Simple Job Board plugin for WordPress is vulnerable to unauthorized data access due to insufficient authorization checking in the fetchquickjob function in all versions up to and including 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be...

WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion

The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute...

Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection

Team WordPress plugin = 5.0.11 contains a SQL injection caused by improper sanitization and escaping of a parameter in an AJAX action accessible to unauthenticated users, letting remote attackers execute arbitrary SQL commands. id: CVE-2025-14124 info: name: Team WordPress Plugin TLP Team = 5.0.9...

GeoServer Demo Request Endpoint - Server Side Request Forgery

It is possible to achieve Server Side Request Forgery SSRF via the Demo request endpoint if Proxy Base URL has not been set. An unauthenticated user can supply a request that will be issued by the server, allowing enumeration of internal networks and, in the case of cloud instances, access to...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...