CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept für privilegiertes Dateilesen über den CheckPoint SNX VPN Linux Client. Betroffene Version CheckPointVPNSNXLinux800007075.sh MD5-Prüfsumme: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit Um den Exploit auszuführen, laden Sie einfach eine beliebige Date...

MapTiler Tileserver-php v2.0 - Unauthenticated XSS

MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. id: CVE-2025-44136 info: name: MapTiler Tileserver-php v2.0 - Unauthenticated XSS...

CVE-2023-27587-PoC

CVE-2023-27587-PoC La semplice PoC di CVE-2023-27587 Cos'è ReadToMyShoe? ReadtoMyShoe RTMS è un'applicazione web rust, yew e axum che ti consente di caricare articoli tramite URL o incollandoli direttamente e ascoltarli in seguito. Impatto Se si verifica un errore durante l'aggiunta di un articol...

CVE-2019-14450

Questo repository non contiene un README...

CVE-2021-20323

CVE-2021-20323 Descrizione Keycloak prima della versione 18.0.0 e dopo la 10.0.0 contiene una XSS riflessa sull'endpoint clients-registrations. Il bug viene attivato fornendo, tramite POST, una struttura JSON con una chiave come nome del parametro che non è supportata dall'endpoint. La risposta...

triton-cve-2025-23320

Dimostrazione di CVE-2025-23320 Questo repository replica CVE-2025-23320, dimostrando CWE-209, Generazione di messaggi di errore contenenti informazioni sensibili Punteggio CVSS: 7.5. Questa vulnerabilità esiste su tutti i server di inferenza NVIDIA Triton 25.06 e precedenti. Questa configurazion...

CVE-2024-39719

Анализ уязвимости раскрытия существования файлов в Ollama CVE-2024-39719 中文 Обзор уязвимости CVE-2024-39719 — это уязвимость раскрытия информации о существовании файлов, затрагивающая Ollama версии 0.3.14 и более ранние. Эта уязвимость позволяет злоумышленникам определять наличие конкретных файло...

CVE-2023-3897

CVE-2023-3897 Eine Benutzernamen-Enumeration ist durch Umgehung des CAPTCHA in der On-Premise SureMDM-Lösung auf Windows-Bereitstellung möglich. Der Angreifer kann lokale Benutzerinformationen über Fehlermeldungen enumerieren. Dieses Problem betrifft SureMDM On-Premise: Version 6.31 und niedriger...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF 摘要 Trivision NC-227WF 固件 5.80（构建于 20141010）的登录机制根据用户名是否存在返回不同的错误消息（"Unknown user" vs "Wrong password"），从而允许攻击者枚举有效用户名。引用的 CVE 记录已发布到 CVE 列表/NVD。 影响 用户名枚举，支持针对性暴力破解或凭据填充攻击。 结合凭据窃取或弱密码，增加了未经授权访问的风险。 观察到的行为/示例 根据用户名有效性返回不同的错误消息。 观察到的响应示例： "Unknown user" — 用户名不存在。...

CVE-2024-55374

CVE-2024-55374 Redcap 14.3.13 è vulnerabile all'enumerazione degli utenti perché restituisce messaggi di errore distinti a seconda che l'utente esista o meno. Ciò consente a un attaccante di inviare molteplici richieste di autenticazione HTTP per effettuare attacchi di forza bruta. Sebbene esista...

CVE-2026-8173

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

CVE-2026-8173 Information Disclosure via 'Copy learned MAC Addresses' Function

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

EUVD-2026-64744

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

CVE-2026-74879

openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint of openssl_encrypt_server/server.py (lines 159–175). The endpoint catches database exceptions and returns the full exception string via str(e) in the HTTP response to unauthenticated calle...

dracut security update

An update is available for dracut. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dracut packages contain an event-driven initial RAM file system initramfs...

dracut security update

An update is available for dracut. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dracut packages contain an event-driven initial RAM file system initramfs...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition...

External Control of File Name or Path

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to External Control of File Name or Path in the remove and checkout functions. An attacker can access the contents of arbitrary files by supplying crafted arguments to...