109673 matches found
cve-2024-32002-poc-aw
CVE-2024-32002 PRC AW Ein POC für CVE-2024-32002, der willkürliches Schreiben in das .git-Verzeichnis demonstriert. Siehe cve-2024-32002-submodule-aw für das zugehörige Submodul-Repository. Was dieses Repo enthält Ein Symlink mit einem willkürlichen Namen, der auf das .git-Verzeichnis verweist...
Vulnerability-Research
🛡️ Schwachstellenforschung Hier katalogisiere ich die von mir entdeckten Schwachstellen, die dazugehörigen Write-ups mit Details zu den Schwachstellen sowie Einblicke in ihre Auswirkungen und Behebung. 🏆 Zugewiesene CVEs CVE-ID| Titel der Schwachstelle| Schweregrad/CVSS| Veröffentlicht| Write-Up...
netview
= netview Netview ist ein Enumerationstool. Es verwendet mit -d die aktuelle Domäne oder eine angegebene Domäne mit -d Domäne, um Hosts aufzulisten. Sie können auch -f verwenden, wenn Sie stattdessen eine Datei mit einer Liste von Hosts angeben möchten. Beliebige Hostnamen, die Sie ausschließen...
CVE-2026-105314
Papermerge 3.5.3 is vulnerable to remote code execution (RCE) due to a directory traversal flaw in the /api/documents/upload endpoint. A standard user can exploit this to write a Python .pth file into the site-packages directory. The malicious code within the .pth file is executed automatically d...
EUVD-2026-92275
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...
CVE-2026-105314
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...
CVE-2026-105314
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...
CVE-2026-105314
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...
CVE-2017-20285
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...
DEBIAN-CVE-2017-20285
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...
CVE-2017-20285
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...
CVE-2017-20285
YAML versions before 1.30 for Perl are vulnerable to a flaw where a loaded document can trigger the DESTROY method of arbitrary classes. The vulnerability occurs because a perl/hash:Class tag blesses a hash into a class named in the document; when the object goes out of scope, Perl executes its d...
CVE-2017-20285 YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...
CVE-2017-20285 YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes
YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The document supplies the object's fields, and Perl calls DESTROY when it goes out of scope. What DESTROY does depends on th...
cve-2024-32002-submodule-aw
CVE-2024-32002 Submodul AW Ein Submodul zur Demonstration von CVE-2024-32002. Demonstriert beliebiges Schreiben in .git. Siehe cve-2024-32002-poc-aw für den funktionierenden POC, der dieses Repository verwendet. Was dieses Repository enthält Einfach eine zufällige Datei, damit wir sie erkennen...
CVE-2026-13607
The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve...
CVE-2023-49979
CVE-2023-49979 Best Student Management System v1.0 - Fehlerhafte Zugriffskontrolle - Verzeichnislisting Beschreibung : Eine Verzeichnislisting-Schwachstelle in Best Student Management System v1.0 ermöglicht es Angreifern, Verzeichnisse und sensible Dateien innerhalb der Anwendung aufzulisten, ohn...
EUVD-2026-92261
The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it generates is ineffective, so an unauthenticated attacker who knows or guesses a file's name can retrieve...
CVE-2026-54121
👻 CVE-2026-54121 — CertiGhost Rechteausweitung in Active Directory Certificate Services AD CS 👋 Übersicht CVE-2026-54121 „Certighost" ist eine Schwachstelle mit hohem Schweregrad zur Rechteausweitung, die Microsoft Active Directory Certificate Services AD CS betrifft. Die Schwachstelle ermöglicht...
CVE-2026-75604
A flaw was found in Next.js. When running on Windows systems, the application fails to properly sanitize backslashes in request paths before building file cache locations. An unauthenticated remote attacker can exploit this directory traversal weakness by submitting crafted requests to access...