The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

CVE-2021-42261

CVE-2021-42261 建议描述 Revisor 视频管理系统（VMS）2.0.0 之前版本存在目录遍历漏洞。成功利用该漏洞可使攻击者遍历文件系统，访问远程服务器上受限目录之外的文件或目录，从而导致易受攻击服务器上的敏感数据泄露。 漏洞类型 目录遍历 供应商产品 Revisor Lab 受影响产品代码库 Revisor VMS 2.0.0 受影响组件 Web 服务器 攻击类型 远程 供应商是否已确认或承认该漏洞？ true 影响信息披露 true 参考 https://revisorlab.com/ 发现者 Vladimir Rotanov（Jet Infosystems...

CVE-2021-2471

CVE-2021-2471 - MySQL Connector/J における XXE Oracle MySQL の MySQL Connectors 製品の脆弱性（コンポーネント: Connector/J）。影響を受けるサポート対象バージョンは 8.0.26 およびそれ以前です。 この脆弱性の攻撃が成功すると、重要なデータへの不正アクセス、または MySQL Connectors がアクセス可能なすべてのデータへの完全なアクセスが可能になり、さらに MySQL Connectors のハングアップや頻繁に繰り返されるクラッシュ（完全なDOS）を引き起こす不正な能力が生じる可能性があります...

CVE-2020-8193

Vulnerabilidades de Citrix ADC Lista de CVE https://support.citrix.com/article/CTX276688 Añadir if while Código https://dmaasland.github.io/posts/citrix.html root@kitploit: responsestr = json.dumpsr.headers.dict'store' if r.statuscode == 406 and "Content-Disposition" in responsestr and...

SEDATED

SEDATED® 项目（敏感企业数据分析器以消除泄露）专注于防止用户凭证和令牌等敏感数据被推送到 Git。 目录 目的 设置 克隆 SEDATED® 更新 .example 文件 根据需要自定义 /config/customconfigs.sh 变量和函数 推送组织特定实现的 SEDATED® 将预接收钩子指向 SEDATED® 的 pre-receive.sh 文件 本地测试 文件说明 pre-receive.sh /config/customconfigs.sh /config/enforcedreposlist.txt /config/regexes.json...

EUVD-2026-83909

Beszel before 0.19.0 contains an insecure direct object reference vulnerability in the POST and DELETE /api/beszel/user-alerts handlers that allows any authenticated user to create or delete alerts on systems they cannot access. Attackers can supply arbitrary system IDs in the request body to...

CVE-2026-94374 MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports

MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model. When processing module results, the code iterates over EventReport entries supplied in the resolved data and saves each one. Unlike the adjacent attribute and object processi...

NoSQLMap

NoSQLMap NoSQLMapは、NoSQLデータベースやNoSQLを使用するWebアプリケーションにおいて、インジェクション攻撃を自動化し、デフォルト設定の脆弱性を悪用して、データベースからデータを開示またはクローンするために設計されたオープンソースのPythonツールです。 元々は@tcsstoolによって作成され、現在は@codingoによってメンテナンスされているNoSQLMapは、Bernardo DameleとMiroslav Stamparの人気SQLインジェクションツールsqlmapへのオマージュとして名付けられました。その概念は、Ming Chow氏がDefcon...

CVE-2026-63039

CVE-2026-63039 — Apache InLong AuditAlertRule ORDER BY SQL 注入 针对 Apache InLong 的 audit-alert-rule 查询中 SQL 注入的可运行概念验证（PoC）复现程序。 InLong manager 的 mapper AuditAlertRuleEntityMapper.selectByCondition 使用安全的 MyBatis 参数进行过滤，但在排序时对两个请求字段使用 $ 字符串插值： root@kitploit: order by $request.orderField...

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export

The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handleexport' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

My Calendar < 3.7.9 - Unauthenticated SQL Injection

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'mcauth' parameter in all versions up to, and including, 3.7.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure

WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by improper enforcement of marker approval filter in admin-ajax fallback for datatables route, letting unauthenticated visitors retrieve unapproved marker records. id: CVE-2026-8385 info: name: WordPress W...

Vendure Core - SQL Injection

Vendure, an open-source headless commerce platform built on Node.js/TypeScript, contains a critical SQL injection vulnerability in its Shop API. The languageCode query parameter is interpolated directly into a raw SQL CASE expression in ProductService.findOneBySlug without parameterization or inp...

CVE-2019-14529

CVE-2019-14529 OpenEMR 项目中的多个 SQL 注入漏洞 漏洞文件中的漏洞函数： /openemr/interface/forms/eyemag/save.php 条件 ：任意授权用户 受影响版本： 5.0.2，已在 5.0.2 版本中修复。 描述 存在两个函数： 1. "storePDF"，使用了未经过滤的变量 "encounter"， 2. "canvas"，使用了两个未经过滤的变量 "encounter" 和 "zone"。 这两个函数都在 DELETE SQL 查询中使用这些变量，且没有任何过滤。这两个变量均可由攻击者控制。 错误消息包含 SQL 查询代码和...

PoC-CVE-2024-44349

PoC-CVE-2024-44349 漏洞发现并测试于 Anteeo WMS - v4.7.31 该漏洞允许威胁行为者在用户名参数中构造SQL命令，并泄露底层数据库中的数据。受影响版本的ANTEEO B2B WMS为v4.7.x至v4.7.34（不含）。 用法 1. git clone [email protected]:AndreaF17/PoC-CVE-2024-44349.git 2. cd PoC-CVE-2024-44349 3. python3 -m venv venv 4. source venv/bin/activate 5. pip3 install -r...

WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection

ChatBot plugin for WordPress up to 4.8.9 contains a sqlinjection caused by insufficient escaping and lack of preparation on the $strid parameter, letting unauthenticated attackers extract sensitive data, exploit requires no authentication. id: CVE-2023-5204 info: name: WordPress AI ChatBot WPBot ...

CVE-2026-89274

The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because WPRMMetadata::sanitizemetadata recursively calls doshortcode on every scalar field of the recipe's structured metadata array —...

CVE-2026-89274 WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content

The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 10.8.1. The vulnerability exists because WPRMMetadata::sanitizemetadata recursively calls doshortcode on every scalar field of the recipe's structured metadata array —...