CVE-2025-67261

CVE-2025-67261 - Injection SQL aveugle basée sur le contenu dans Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 est vulnérable à une injection SQL aveugle basée sur le contenu. La vulnérabilité se trouve dans la fonction Recherche de la page Commandes. La fonction «...

Malicious code in abbishal-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a4950e43d1db42d899107c229ccdbb21fd5e8eeeb4d5771b352a8918658e4f package.json declares a preinstall script sh./test.sh. test.sh assembles the string curl from single-character shell variables b=e, i=c, s=n, h=u, a=...

django-cve-2025-64459

Django CVE-2025-64459 Cette application démontre la CVE-2025-64459 affectant plusieurs versions de Django. Cette vulnérabilité a été corrigée dans les versions plus récentes de Django. Injection SQL L'injection SQL se produit lorsque des données fournies par l'utilisateur sont traitées comme...

MAL-2026-17664 Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e0013701f6ab53085883b09092f0cd5ae9aaaab51a9f0e9de5aa68946ae9e1 The package ships two minified bundles — dist/poc-model.bundle.min.js and dist/poc-bootstrap.bundle.min.js — that are wired as the model and bootstra...

jupyter-notebooks

VulnCheck Jupyter Notebooks Jupyter позволяет объединять markdown и код в единое интерактивное полотно. Этот проект предоставляет примеры Jupyter-ноутбуков, которые получают данные из VulnCheck и отображают их в виде графиков. Более актуальные примеры см. в vulncheck-oss/vulnerability-research...

Malicious code in @praveenvjpm/color-utils-7210 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b29d9da4319a314669b87ffd4bc0d736dbf3f4c16803e0363ecb36288c7bb2 On npm install, the package's preinstall hook executes install.js, which collects host identifiers os.hostname, process.cwd, username and reads flag...

MAL-2026-17651 Malicious code in @praveenvjpm/color-utils-7210 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b29d9da4319a314669b87ffd4bc0d736dbf3f4c16803e0363ecb36288c7bb2 On npm install, the package's preinstall hook executes install.js, which collects host identifiers os.hostname, process.cwd, username and reads flag...

CVE-2026-21589

💠 CVE-2026-21589 — произвольный доступ к файлам в Atlassian до аутентификации Произвольный доступ к файлам без аутентификации через обход пути Исследование безопасности и технический анализ CVE-2026-21589, затрагивающей несколько продуктов Atlassian Data Center. Обзор CVE-2026-21589 — критическая...

acropalypse-reconstructor

Acropalypse CLI Multi-Tool Un script Python léger et sans interface graphique, conçu pour détecter et reconstruire les images recadrées vulnérables à la vulnérabilité Acropalypse CVE-2023-21036 pour Google Pixel Markup et CVE-2023-28303 pour l'outil de capture d'écran Windows. Cet outil vous perm...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Режим использования ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Этот скрипт предназначен ТОЛЬКО для образовательных целей и авторизованного пентестинга. Использование данного инструмента в системах без явного разрешения НЕЗАКОННО. Автор...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the Brocade Fabric OS WebTools management interface, affecting versions before 9.2.2d and 10.0.0 through 10.0.0a1 . The root cause is a failure to properly validate and sanitize a user-supplied status file path parameter during configuration ...

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

CVE-2025-2011

CVE-2025-2011 PoC Par : X3RX3S Mais fièrement arraché par Ash Wesker qui a utilisé GPT sur mon code avec sa bannière ; voir ici --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 Vous pouvez même voir mon pseudo dans 'son' code --' Objectif : Un outil de preuve de concept pour tester une...

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

CVE-2026-87669

Brocade Fabric OS versions before 10.0.1 are susceptible to a missing authorization check in the REST API interface. This vulnerability allows an authenticated user, regardless of their role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data a...

Atom CMS v2.0 - SQL Injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

Joomla! JCK Editor SQL Injection

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter. id: CVE-2018-17254 info: name: Joomla! JCK Editor SQL Injection author: SumanKar severity: critical description: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection vi...

NextGen Healthcare Mirth Connect - Remote Code Execution

Unauthenticated remote code execution vulnerability in NextGen Healthcare Mirth Connect before version 4.4.1. id: CVE-2023-43208 info: name: NextGen Healthcare Mirth Connect - Remote Code Execution author: princechaddha severity: critical description: Unauthenticated remote code execution...

WooCommerce Payments - Unauthorized Admin Access

An issue in WooCommerce Payments plugin for WordPress versions 5.6.1 and lower allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the...