380802 matches found
cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure
CVE-2026-34474: ZTE H298A / H108N 通过 ETHCheat 泄露秘密 CVE-2026-34474 的技术分析：未经过身份验证的 ETHCheat=1 请求会导致受影响的 ZTE ZXHN H298A 1.1 和 H108N 2.6 路由器在响应标记中返回实时的管理员密码、ESSID 和 WLAN PSK。 摘要 观察到的利用路径是未经验证的管理页面泄露。精心构造的 GET 请求 getpage.lua?pid=1000ÐCheat=1 返回包含 OBJUSERINFOIDPassword1、WLANPSKKeyPassphrase1 和...
CVE-2026-105292 Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing th...
EUVD-2026-92156
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing th...
CVE-2026-105292
The software Chaterm before version 0.12.1 is vulnerable to a login cross-site request forgery (CSRF) . The root cause is a lack of OAuth state validation when processing chaterm:// callbacks. A remote attacker can trigger a crafted callback from a web page to inject attacker-controlled userInfo....
CVE-2026-105292 Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing th...
servicenow
ServiceNow Widget-Simple-List 配置错误扫描器 概述 该工具用于扫描 ServiceNow widget-simple-list 插件中的配置错误。它检查目标实例是否因配置不当而存在数据泄露风险。 重要说明 如需深入了解攻击技术和利用方法，请参阅此处提供的技术细节。 前置要求 Python 3.x 所需的 Python 库：requests 你可以使用 pip 安装所需的库： pip install requests 使用方法 1. 将仓库克隆到本地机器。 2. 导航到包含 servicescan.py 的目录。 3. 选择以下方法之一，使用 Python 3...
gods-eye-view
🌐 God's Eye View Un simulador de satélite espía en tu navegador — y entonces te das cuenta de que las fuentes son públicas y los datos son reales. Globo terráqueo 3D fotorrealista. Aviones, barcos, satélites, terremotos, tráfico y cámaras públicas en vivo. Control por voz manos libres impulsado p...
PT-2026-106155
Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An out-of-bounds write can occur in multiple locations due to uninitialized data. This issue allows for remote escalation of privilege without requiring user interaction or additional...
EUVD-2026-92470
WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...
PT-2026-106168
Name of the Vulnerable Software and Affected Versions VK Google Job Posting Manager versions prior to 1.3.2 Description Deserialization of untrusted data in the vk-google-job-posting-manager allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an...
PT-2026-106171
Name of the Vulnerable Software and Affected Versions WP Ultimate Exporter versions prior to 3.0 Description An issue involving the deserialization of untrusted data in the wp-ultimate-exporter component allows for Object Injection. Object Injection occurs when untrusted data is used to abuse the...
PT-2026-106093
Name of the Vulnerable Software and Affected Versions BuildKit – Product Builder for WooCommerce – Custom PC Builder versions prior to 1.0.29 Description Improper validation of the specified quantity in the input allows for input data manipulation within the woo-product-builder component...
PT-2026-106074
Name of the Vulnerable Software and Affected Versions Product Feed PRO for WooCommerce versions prior to 13.5.8 Description Deserialization of untrusted data in the woo-product-feed-pro plugin allows Object Injection. Object Injection occurs when an application deserializes untrusted data,...
PT-2026-106065
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...
ROS-20261005-73-0097
The vulnerability in dotnet8.0 is related to the incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20261005-73-0098
The vulnerability in dotnet10.0 is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-94636
Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...
ROS-20261005-73-0133
The vulnerability of the kawethprobe function in the drivers/net/usb/kaweth.c module of the Linux USB network adapter driver framework is related to improper validation of consistency checks in input data. Exploiting this vulnerability could allow an attacker to cause service failures...
EUVD-2026-92442
WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The file value inside the JSON is concatenated directly into...