triton-cve-2025-23320

Demostración de CVE-2025-23320 Este repositorio replica CVE-2025-23320, demostrando CWE-209, Generación de mensajes de error que contienen información sensible Puntuación CVSS: 7.5. Esta vulnerabilidad existe en todos los servidores de inferencia NVIDIA Triton 25.06 y anteriores. Esta configuraci...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Prueba de concepto para la lectura privilegiada de archivos a través del cliente VPN SNX de CheckPoint para Linux. Versión Afectada CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit Para explotarlo, basta con cargar cualquie...

CVE-2023-27587-PoC

CVE-2023-27587-PoC El PoC simple de CVE-2023-27587 ¿Qué es ReadToMyShoe? ReadtoMyShoe RTMS es una aplicación web rust, yew y axum que permite subir artículos mediante URL o pegándolos directamente y escucharlos más tarde. Impacto Si se produce un error al añadir un artículo, el sitio web muestra ...

MapTiler Tileserver-php v2.0 - Unauthenticated XSS

MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. id: CVE-2025-44136 info: name: MapTiler Tileserver-php v2.0 - Unauthenticated XSS...

CVE-2025-56764

CVE-2025-56764 — Trivision NC-227WF 摘要 Trivision NC-227WF 固件 5.80（构建于 20141010）的登录机制根据用户名是否存在返回不同的错误消息（"Unknown user" vs "Wrong password"），从而允许攻击者枚举有效用户名。引用的 CVE 记录已发布到 CVE 列表/NVD。 影响 用户名枚举，支持针对性暴力破解或凭据填充攻击。 结合凭据窃取或弱密码，增加了未经授权访问的风险。 观察到的行为/示例 根据用户名有效性返回不同的错误消息。 观察到的响应示例： "Unknown user" — 用户名不存在。...

CVE-2024-55374

CVE-2024-55374 Redcap 14.3.13 es vulnerable a la enumeración de usuarios porque devuelve mensajes de error distintos según si el usuario existe o no. Esto permite a un atacante enviar múltiples solicitudes de autenticación HTTP para realizar ataques de fuerza bruta. Aunque existe un mecanismo de...

CVE-2021-20323

CVE-2021-20323 Descripción Keycloak anterior a 18.0.0 y posterior a 10.0.0 contiene un XSS reflejado en el endpoint de registros de clientes. El error se desencadena al proporcionar, mediante POST, una estructura JSON con una clave como nombre de parámetro que no es compatible con el endpoint. La...

CVE-2026-105707 uptrace user_handler.go Login information exposure

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/userhandler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

PT-2026-106321

A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user handler.go. The manipulation leads to information exposure through error message. It is possible to initiate the attack remotely. The exploit has...

CVE-2023-3897

CVE-2023-3897 La enumeración de nombres de usuario es posible evadiendo el CAPTCHA en la solución SureMDM local en implementaciones de Windows, lo que permite al atacante enumerar información de usuarios locales a través de mensajes de error. Este problema afecta a SureMDM local: versión 6.31 y...

CVE-2024-39719

Ollama 文件存在性泄露漏洞 CVE-2024-39719 详细分析 漏洞概述 CVE-2024-39719 是一个影响 Ollama 0.3.14 及之前版本的文件存在性泄露（File Existence Disclosure）漏洞。该漏洞允许攻击者通过 API 接口探测服务器上特定文件是否存在，从而可能导致信息泄露。 发布日期 ：2024年10月31日 漏洞详情 漏洞原理 该漏洞存在于 Ollama 的 /api/create 端点中。当攻击者调用 CreateModel API...

CVE-2019-14450

此存储库没有 README。...

CVE-2026-102721

A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...

CVE-2026-101915

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.6 and 1.14.5, when an application method handler throws an uncaught error, the server includes its error message in the status message sent to the client. The thrown error message is...

CLEANSTART-2026-HE08866 When returning errors, functions in the net/textproto package would include its input as part of the error

Security vulnerability affects the loki package. When returning errors, functions in the net/textproto package would include its input as part of the error...

CVE-2026-3626

IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-4921

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-4921 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-4921 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

EUVD-2026-85360

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...