19955 matches found
Palo Alto Networks Expedition - OS Command Injection
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...
CVE-2025-32421
CVE-2025-32421 Laboratorio de la técnica Eclipse Demostración integral de la técnica Eclipse CVE-2025-32421: un sofisticado ataque de condición de carrera contra Next.js 15.0.4 que elude el parche original de CVE-2024-46982. ADVERTENCIA - SOLO CON FINES EDUCATIVOS Este laboratorio está diseñado...
django-cve-2025-64459
Django CVE-2025-64459 该应用程序演示了影响多个 Django 版本的 CVE-2025-64459。该漏洞已在 Django 的新版本中修复。 SQL 注入 SQL 注入是指将用户提供的输入作为 SQL 查询的一部分处理，从而使攻击者能够改变查询的工作方式，并暴露或修改其本应无权访问的数据。 漏洞描述 这是 Django QuerySets 和 Q 对象中的一个 SQL 注入漏洞，可能导致数据泄露。该漏洞的利用方式是将查询参数传递给 Django QuerySet，用户能够设置 connector 和 negated 键来执行任意 SQL 片段。...
CVE-2026-35678
Informe de Investigación de Vulnerabilidad: Referencia Directa a Objetos Insegura IDOR en Todo Eduplus Student ERP Investigador: Vinay Sharma 1. Resumen Ejecutivo Este informe detalla una vulnerabilidad de seguridad de alta severidad identificada en la plataforma Eduplus Student ERP,...
CVE-2021-43798-poc
CVE-2021-43798-poc Grafana8.x lectura arbitraria de archivos python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...
CVE-2024-55457-PoC
CVE-2024-55457-PoC MasterSAM Star Gate v11 es vulnerable a un ataque de traversal de directorios a través del endpoint /adama/adama/downloadService. Un atacante puede explotar esta vulnerabilidad manipulando el parámetro file para acceder a archivos arbitrarios en el servidor, lo que potencialmen...
CVE-2023-49339
CVE-2023-49339 Security Vulnerability Report: Ellucian Banner System Introduction This document outlines a critical security vulnerability found in the Ellucian Banner System, particularly in version 9.17 and earlier versions. The vulnerability has been identified in systems used by various...
JetBrains YouTrack < 2026.2.18634 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18634. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation. CVE-2026-86482 - In JetBrains YouTrack befo...
PT-2026-89516
Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...
PT-2026-89550
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...
PT-2026-89386
AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 master, 2026-08-23 incompletely sanitizes sensitive user fields in the APIName=video response. Video rows include columns joined from the video owner's user record, and API::get api video calls removeSensitiveUserFields only when th...
JetBrains GoLand < 2026.2.2.1 Missing Authentication (CVE-2026-86506)
The version of JetBrains GoLand installed on the remote host is prior to 2026.2.2.1. It is, therefore, affected by a missing authentication vulnerability: - In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data...
CVE-2025-61777
CVE-2025-61777 1. Unauthorized modification of badge templates on FlagforgeCTF CVE-2025-61777 Summary The Flagforge application https://flagforge.xyz exposes critical vulnerabilities in its administrative API endpoints, specifically /api/admin/badge-templates GET and...
EUVD-2026-74940
Snipe-IT versions = 7.0.12 and = 8.6.3 contain an authorization bypass in the Livewire importer component App\Livewire\Importer, mounted at the imports.index route. The component only checked the broad 'import' ability at mount time, while its files and activeFile computed properties queried the...
EUVD-2026-74938
snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks. Authenticated attackers with location view permission can access printassigned and printallassigned endpoints to retrieve related users,...
CVE-2023-30146
CVE-2023-30146 - Assmann/HooToo 网络摄像头漏洞 - 敏感数据泄露 描述 在 HooToo 和 Assmann 品牌的 IP 摄像头中发现了一个问题。固件将管理员和用户凭据以明文形式存储在备份中。备份可以在无需身份验证的情况下被检索和解压，从而使远程攻击者能够访问网络。 漏洞类型 敏感数据泄露 攻击类型 远程 影响 可能的网络入侵 背景 市场上销售的许多 IP 摄像头似乎基于海思 H35xx SoC 1。这些设备上运行的固件似乎由一家名为 Foscam（深圳市福斯康姆智能科技有限公司）的公司制造，该公司是 IP...
CVE-2026-80339
The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the billing details of any order, together with the secret that...
EUVD-2026-74701
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
CVE-2026-16960 Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...