425455 matches found
OESA-2026-3692 libsoup security update
libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTT...
OESA-2026-3690 libsoup security update
libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTT...
OESA-2026-3672 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3670 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3671 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3669 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts...
OESA-2026-3660 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
OESA-2026-3659 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...
OESA-2026-3657 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn...
OESA-2026-3658 python-gunicorn security update
GunicornGreen Unicorn is a Python WSGI HTTP Server for UNIX. It's a pre-fork worker model ported from Ruby's Unicorn project. The Gunicorn server is broadly compatible with various web frameworks, simply implemented, light on server resource usage, and fairly speedy. Security Fixes: Gunicorn fail...
OESA-2026-3608 python-ujson security update
UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...
OESA-2026-3607 python-ujson security update
UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...
OESA-2026-3606 python-ujson security update
UltraJSON Security Fixes: UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation.CVE-2021-45958 UltraJSON is a fast JSON encoder and decoder written in pure C with...
OESA-2026-3601 aom security update
The Alliance for Open Media’s focus is to deliver a next-generation video format that is: Security Fixes: An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows ...
CVE-2021-41511
CVE-2021-41511 Título del Exploit: Sistema de Gestión de Reservas de Alojamiento 1.0 - Inyección SQL / Bypass de Autenticación Autor del Exploit: Nitin Sharmavidvansh Página web del proveedor: https://www.sourcecodester.com/php/14883/lodging-reservation-management-system-php-free-source-code.html...
CVE-2023-31852
CVE-2023-31852 Cudy LT400 基于 Web 的管理界面存在反射型跨站脚本（XSS）攻击。 页面 /cgi-bin/luci/admin/network/wireless/config 通过 iface 参数存在反射型 XSS。 利用方法包括向受害者发送包含恶意代码的特制请求。 受影响的应用程序未设置 Session Cookie 的 HttpOnly 属性；这可能导致通过会话令牌窃取实现管理员接管。 PoC root@kitploit: GET...
wildfly__wildfly_CVE-2018-1047_11-0-0-Final
WildFly Application Server http://wildfly.org Fast Startup Small Footprint Modular Design Unified Configuration and Management And of course Java EE7! Building Prerequisites: JDK 8 or newer - check java -version Maven 3.3.1 or newer - check mvn -v On nix systems, make sure that the maximum number...
apache__jspwiki_CVE-2019-10076_2-11-0-M3
Apache JSPWiki 2.11 - Documentación root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...
CVE-2024-22198_Checker
CVE-2024-22198 - ejecución remota de código autenticado en Nginx-ui Descripción Esta herramienta está diseñada para comprobar de forma remota la versión de Nginx-ui y notificar si es vulnerable a CVE-2024-22198. Nginx-UI es una interfaz web para gestionar configuraciones de Nginx. Es vulnerable a...
CVE-2024-49368
Nginx UI 漏洞利用设置 本指南概述了使用 Docker Compose 设置 Nginx UI、创建用户、运行漏洞利用以及验证 Docker 容器内结果的步骤。 前提条件 确保你的机器上已安装 Docker 和 Docker Compose。 熟悉基本的命令行操作。 通过 Docker 安装 nginx 1. 下载 docker-compose.yml 2. 验证你的 nginx.conf 文件是否包含以下行。 注意： 在 Linux Ubuntu 上，此文件位于 /etc/nginx/nginx.conf root@kitploit: http ... include...