354786 matches found
CVE-2025-56801
CVE-2025-56801 AES-CFB IV Generation Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-1204: Generation of Weak Initialization Vector IV, CWE-321: Use of Hard-coded Cryptographic Key CVSS : 5.1 MEDIUM Vector...
CVE-2026-33980
CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...
CVE-2021-43798-poc
CVE-2021-43798-poc Grafana8.x Arbitrary File Read python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...
CVE-2026-32247
CVE-2026-32247 — Cypher Injection in graphiti-core via unsanitized nodelabels Severity : High CVSS 8.1 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : graphiti-core = 0.28.1 pip Fixed in : 0.28.2 Advisory : GHSA-gg5m-55jj-8m5g NVD :...
CVE-2026-47546
A flaw was found in the NVIDIA GPU display driver. The driver firmware fails to properly validate input, allowing an authenticated local attacker with elevated privileges to trigger improper processing. Successful exploitation can result in arbitrary code execution, privilege escalation, a denial...
CVE-2026-47543
A flaw was found in nvidia-driver. The driver's kernel mode layer fails to properly validate input, allowing a local attacker with administrative privileges to supply crafted input. Successful exploitation can lead to arbitrary code execution, privilege escalation, denial of service DoS,...
cve-2024-23113-poc
CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discovered in the Linux Kernel , classified as an arbitrary code execution vulnerability that affects the bpf Berkeley Packet Filter subsystem. Specifically, this vulnerability affects objects of the bpfprog type in bpf programs, and can allow ...
CVE-2026-23980-Exploit
CVE-2026-23980 - Apache Superset Authenticated SQL Injection / \ | | | | | || | \\ sqlExpression goes straight to the query. no parameterization. no hope. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - adhoc column sqlExpression / extras.where injecte...
CVE-2023-28432
CVE-2023-28432 Minio is an object storage service written in Go. It implements most of the Amazon S3 cloud storage service interfaces and can be seen as an open-source version of S3, making it very suitable for storing large volumes of unstructured data such as images, videos, log files, backup...
CVE-2026-27579-CollabPlatform-Appwrite-CORS-Misconfiguration
Appwrite CORS 設定ミス悪用 PoC CVE-2026-27579 – 緩すぎる CORS による認証済みアカウントデータ漏洩 CVE-2026-27579 GHSA-qh5m-p8jh-hx88 realtime-collaboration-platform で使用されている Appwrite バックエンドの深刻な CORS 設定ミスにより、攻撃者が制御するオリジンが、ログイン中の被害者から認証済みの機密ユーザーデータ（メールアドレス、ユーザー ID、MFA ステータスなど）を、資格情報付きクロスオリジンリクエスト経由で読み取ることができます。 影響を受けるソフトウェア...
gh-repo-clone-marklindsey11--CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CV
-My intention was to concieve of a novel, and effective, policy-based data science framework to optimize a massively distributed alternative data landscape. By leveraging emerging critical new technological advances in operations and core processes, integrated natively, in an architecture which...
CVE-2026-104059
Lektor versions 3.3.14 and 3.4.0b15 are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within the admin API blueprint . The root cause is a lack of CSRF tokens, Origin/Referer validation, CORS configuration, and Host allowlisting. This allows unauthenticated attackers to perform ...
CVE-2026-104059 Lektor 3.3.14 CSRF via Admin API Endpoints
Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending cross-origin requests without CSRF tokens, Origin/Referer validation, CORS configuration, or Host...
CVE-2026-73976
djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the search/listing queries through three separate parameters. Because the affected queries are read SELECT queries, this does not write to the...
CVE-2023-22515-joaoviictorti
CVE-2023-22515 Overview Compile Usage Running CVE-2023-22515 Overview Confluence is a web-based enterprise wiki developed by Australian software company Atlassian. Atlassian has been made aware of an issue reported by some customers where external attackers may have exploited a previously unknown...
cve-2026-20127
CVE-2026-20127 Scanner Overview This project is a Windows-based network scanning tool written in C++ that attempts to identify potential Cisco SD-WAN / vManage-like services and perform a vulnerability check against a referenced issue labeled CVE-2026-20127. Features IP range scanning start → end...
CVE-2024-55457-PoC
CVE-2024-55457-PoC MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of...
CVE-2026-33634-Scanner
CVE-2026-33634-Scanner Automated scanner for detecting indicators of compromise IOCs associated with the TeamPCP supply chain attack CVE-2026-33634 📋 Table of Contents Overview Vulnerability Features Detected IOCs Installation Usage Examples Report Format Project Structure System Requirements...
markdown-exfil-tester
valtik-markdown-exfil-tester Probador de caja negra para inyección indirecta de instrucciones que conduce a la exfiltración de markdown / HTML en chatbots basados en LLM. Esta es la clase de vulnerabilidad que afectó a Microsoft 365 Copilot CVE-2025-32711, también conocido como EchoLeak, ChatGPT...