firebase

firebase Эксплуатация уязвимых/неправильно настроенных баз данных Firebase Отказ от ответственности: Предоставленное программное обеспечение предназначено только для образовательных целей. Используйте на свой страх и риск, создатель не несет ответственности за любой причиненный ущерб. Пожалуйста,...

ransomwatch

RansomWatch RansomWatch est un outil de surveillance des sites de fuite de ransomwares. Il récupère toutes les entrées présentes sur divers sites de fuite, stocke les données dans une base SQLite et envoie des notifications via Slack ou Discord lorsqu'une nouvelle victime apparaît ou qu'une victi...

web2py-e94946d-CVE-2016-3957

Readme web2py — это бесплатный полнофункциональный фреймворк с открытым исходным кодом для быстрой разработки высокопроизводительных, масштабируемых, безопасных и переносимых веб-приложений на основе баз данных. Он написан и программируется на Python. Лицензия LGPLv3 Узнайте больше на...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Обзор CVE-2026-26980 — это неаутентифицированная SQL-инъекция в TryGhost Ghost CMS Content API. Уязвимый путь доступен через логику...

CVE-2025-46171

vBulletin 3.x.x - Déni de service par surcharge de la liste d'amis Résumé Le point de terminaison /misc.php?do=buddylist exécute une seule et grande requête JOIN qui récupère tous les amis ainsi que leurs informations utilisateur et de session pour vérifier leur statut en ligne. Parce que cette...

PT-2026-104126

Name of the Vulnerable Software and Affected Versions Dc Woocommerce Multi Vendor versions prior to 5.0.19 Description An issue exists where authenticated attackers with vendor-level access or higher specifically those with the edit stores capability can perform SQL Injection. This occurs because...

openSUSE 16 Security Update : python-pymongo (openSUSE-SU-2026:22003-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22003-1 advisory. Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds ...

CVE-2014-125130: Improper Limitation of a Pathname to a Restricted Directory

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

PT-2026-104437

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The database initialization routine assigns a fixed, vendor-defined password to the database superuser account during creation instead of generating a unique password for each...

PT-2026-104092

The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the database once the resulting content is published and viewed b...

CVE-2026-104872: Insertion of Sensitive Information into Log File

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript applications. Prior to versions 0.66.0 of @opentelemetry/instrumentation-cassandra-driver, 0.65.0 of @opentelemetry/instrumentation-knex, 0.67.0 of @opentelemetry/instrumentation-mongoose,...

PT-2026-104151

The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-94592: Use of Hard-coded Credentials

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

VulnCheck KEV: CVE-2014-125130

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

CVE-2025-11077

CVE-2025-11077 - Injection SQL Auteur : Byte Reaper Description Cette vulnérabilité est une injection SQL aveugle dans le fichier addcontent.php du système de gestion de l'apprentissage en ligne CVE-2025-11077, permettant à un attaquant d'extraire des informations de la base de données en envoyan...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Автор: Byte Reaper Описание CVE-2025-10046 — это уязвимость SQL-инъекции в плагине ELEX WooCommerce Google Shopping Product Feed для WordPress, версии 1.4.3 и более ранние. Проблема находится в файле includes/elex-manage-feed-ajax.php, где парамет...

CVE-2026-93546

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-Уязвимость-SQL-инъекции Автор эксплойта: ugurkarakoc Домашняя страница вендора https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Ссылка на программное обеспечение https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Обзор...

vFeed

CONSULTEZ LA NOUVELLE BIBLIOTHÈQUE https://github.com/vfeedio/pyvfeed vFeed Le Corrélateur de Vulnérabilités et de la Base de Données de Renseignement sur les Menaces Wrapper vFeed Python Wrapper / Database est un concept de schéma de nommage compatible CVE, CWE et OVAL qui fournit des références...