82178 matches found
CVE-2026-88467
CRMEB Knowledge-Paid System crmebzzffclass 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information...
CVE-2026-55179 Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...
CVE-2026-55179
Joplin Server (the self-hosted component of the open-source note-taking app Joplin) contains an authorization flaw in its GET /items/:id/content route (defined in packages/server/src/routes/index/items.ts). Prior to version 3.7.2 , the route loads item content using an attacker-supplied internal ...
CVE-2026-55179 Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...
CVE-2026-55179 Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...
setcred
FreeBSD setcred2 â ç ç©¶è³æ ãã®ãµããã£ã¬ã¯ããªã«ã¯ãFreeBSD 14.x ã«ãŒãã«ã«ããã setcred2 ã¹ã¿ãã¯ãããã¡ãªãŒããŒãããŒã®è§£èª¬èšäºãšåäœãããšã¯ã¹ããã€ãããŸãšããŠããŸãã è匱æ§èªäœã®è©³çŽ°ã¯ setcred.txt ã«å®å šã«èšèŒãããŠããŸããèŠæšã¯æ¬¡ã®ãšããã§ãã kernsetcredcopyinsuppgroups ã¯ãgroups ã gidt ã§ããã«ã ããããã sizeofgroups ã䜿çšããŠãããããåºå®ãµã€ãºã®ã«ãŒãã«ã¹ã¿ãã¯é åãžã® copyin ã§ 4 ãã€ãã§ã¯ãªã 8...
CVE-2023-40130
https://wrlus.com/android-security/bindservice-error-handle/...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
K000163345: GnuTLS vulnerability CVE-2026-3832
Security Advisory Description A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a clien...
CVE-2024-10924
CVE-2024-10924 ã® POC Really Simple Plugins WordPress ãã©ã°ã€ã³ã®REST APIã«ããããšã©ãŒãã³ããªã³ã°ã®è匱æ§ïŒããŒãžã§ã³9.0.0ãã9.1.1.1ãŸã§ã䞡端ãå«ãïŒã«ãããäºèŠçŽ èªèšŒãæå¹ãªå Žåãæ»æè ã¯èªèšŒããã€ãã¹ããæ¢åã®ãŠãŒã¶ãŒãŸãã¯ç®¡çè ã¢ã«ãŠã³ããä¹ã£åãããšãå¯èœã§ãã 芪åãªããšã«ããã©ã°ã€ã³ã®ããŒãžã§ã³9.1.1.1ã忢±ãããŠããŸããè§£åã㊠wp-content/plugins ãã©ã«ãã«ã¢ããããŒãããã ãã§ãããã©ã°ã€ã³ãæå¹åãã2FAãæå¹ã«ããã®ãå¿ããªãã§ãã ããã å¿ èŠæ¡ä»¶ pip...
Apache ActiveMQ Client: Apache ActiveMQ: Apache ActiveMQ All: Apache ActiveMQ: Denial of Service via crafted WireFormatInfo frame
A flaw was found in Apache ActiveMQ. An unauthenticated network attacker can exploit this vulnerability by sending a specially crafted WireFormatInfo frame with an excessively large size value. This unvalidated value causes the broker to attempt an oversized memory allocation during...
CVE-2021-40353
CVE-2021-40353 CVE-2021-40353 openSIS 8.0 SQL 죌ì ì·šìœì https://vulners.com/cve/CVE-2021-40353 MySQL ëë MariaDBê° ì í늬ìŒìŽì ë°ìŽí°ë² ìŽì€ë¡ ì¬ì©ë ë openSIS 8.0 ë²ì ì SQL 죌ì ì·šìœì ìŽ ì¡Žì¬í©ëë€. 공격ìë USERNAME ë§€ê°ë³ì륌 íµíŽ SQL ëª ë ¹ì ì€íí ì ììµëë€. ì·šìœí PHP íìŽì§: index.php - USERNAME ë§€ê°ë³ì ì·šìœí íìŽë¡ë ' - ë°ìŽí°ë² ìŽì€ ì 볎ì íšê» ì€ë¥ë¥Œ ë°ììíµëë€ " - ì€ë¥ë¥Œ ë°ìì...
CVE-2019-20372
CVE-2019-20372 ãã®ãªããžããªã¯æè²ç®çã®ã¿ã§ãã /server è匱ãªãµãŒããŒãå®è¡ããã«ã¯ ./server.sh /exploit.py ãšã¯ã¹ããã€ãã¹ã¯ãªãããå®è¡ããã«ã¯ python3 exploit.py importante! https://blkcipher.pl/assets/pdfs/2019-12-10-errorpagerequestsmuggling.pdf https://github.com/vuongnv3389-sec/CVE-2019-20372 ãªããã®ãªããžããªãªã®ãïŒ...
CVE-2021-3560
CVE-2021-3560 polkit ã®ã¬ãŒã¹ã³ã³ãã£ã·ã§ã³ãä»ããæš©éææ Œã è匱æ§ã®èª¬æ CVE-2021-3560 㯠polkit ã®ã¬ãŒã¹ã³ã³ãã£ã·ã§ã³ã§ãããèªèšŒãããŠããªãããŒã«ã«ãŠãŒã¶ãŒã root æš©éãååŸã§ããããã«ããŸãããã®è匱æ§ã¯ãæ¥ç¶ãåæããããšãã« polkit ã D-Bus ãšã©ãŒãåŠçããæ¹æ³ã«ååšããŸãã ã¿ã€ãã³ã°ã®æ±ºå® æé©ãªã¿ã€ãã³ã°ã決å®ããã«ã¯ã次ã®ã³ãã³ããå®è¡ããŸãã root@kitploit: time dbus-send --system --dest=org.freedesktop.Accounts...
CVE-2023-36874
CVE-2023-36874 æŠå¿µå®èšŒïŒPoCïŒ CVE-2023-36874 è匱æ§ã®æè²çãã€é²åŸ¡çãªèª¿æ»å®è£ ã§ãããWindows ãšã©ãŒå ±åïŒWERïŒã³ã³ããŒãã³ãå ã®ããŒã«ã«æš©éææ ŒïŒLPEïŒã®æ¬ é¥ãå®èšŒãããã®ã§ãã â ïž å 責äºé ãã®ãªããžããªããã³æäŸããããœãŒã¹ã³ãŒãã¯ãæè²ç®çãã»ãã¥ãªãã£ç ç©¶ãããã³é²åŸ¡çç£æ»ã®ããã ã ãæå³ããŠããŸããæç€ºçãªèš±å¯ãªãã«ãæ¬çªã·ã¹ãã ãç°å¢ã§ãã®ã³ãŒããå®è¡ããªãã§ãã ãããäœè ã¯ããã®çŽ æã䜿çšããŠè¡ããã誀çšãæå®³ããŸãã¯éæ³è¡çºã«ã€ããŠäžåã®è²¬ä»»ãè² ããŸããã ð è匱æ§ã®æŠèŠ CVE-2023-36874...
CVE-2017-9822
CVE-2017-9822 DotNetNuke Cookie Deserialization ãªã¢ãŒãã³ãŒãå®è¡ RCE DotNetNuke DNN ããŒãžã§ã³5.0.0ãã9.3.0ã¯ããªã¢ãŒãã³ãŒãå®è¡ RCE ã«ã€ãªãããã·ãªã¢ã©ã€ãŒãŒã·ã§ã³ã®è匱æ§ã®åœ±é¿ãåããŸããDotNetNuke ã¯ãå¿åãŠãŒã¶ãŒã®ããŒãœãã©ã€ãºãªãã·ã§ã³ãä¿åããããã« DNNPersonalization Cookie ã䜿çšããŸãïŒèªèšŒæžã¿ãŠãŒã¶ãŒã®ãªãã·ã§ã³ã¯ãããã¡ã€ã«ããŒãžã«ä¿åãããŸãïŒããã® Cookie ã¯ãã¢ããªã±ãŒã·ã§ã³ãã«ã¹ã¿ã 404...
CVE-2023-3897
CVE-2023-3897 ãŠãŒã¶ãŒåã®åæãå¯èœã§ããOn-premise SureMDM Solution on Windows deploymentã«ãããŠãCAPTCHAããã€ãã¹ããããšã§ãæ»æè ã¯ãšã©ãŒã¡ãã»ãŒãžãä»ããŠããŒã«ã«ãŠãŒã¶ãŒæ å ±ãåæã§ããŸãã ãã®åé¡ã¯SureMDM On-premise 6.31ããã³ãã以äžã®ããŒãžã§ã³ã«åœ±é¿ããŸãã https://nvd.nist.gov/vuln/detail/CVE-2023-3897...
CVE-2025-24963
CVE-2025-24963 - Vitestãã©ãŠã¶ã¢ãŒã - ããŒã«ã«ãã¡ã€ã«èªã¿åã âCVE-2025-24963 ã¯ãVite ãããŒã¹ã«ãã Vitest ãã¹ããã¬ãŒã ã¯ãŒã¯ã®ã³ã³ããŒãã³ãã§ãã @vitest/browser ããã±ãŒãžã«åœ±é¿ããäžçšåºŠã®æ·±å»åºŠã®è匱æ§ïŒCVSS 3.1 ã¹ã³ã¢: 5.9ïŒã§ãããã®è匱æ§ã¯ããã©ãŠã¶ã¢ãŒãã® HTTP ãµãŒããŒã® screenshot-error ãã³ãã©ã«ãããäžé©åãªå ¥åæ€èšŒã«èµ·å ããŸããæ§æãªãã·ã§ã³ browser.api.host: true...
python-paddingoracle
python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...
joomla.3.7.0exploit
CVE-2017-8917 Joomla SQLi PoC ãã®ãªããžããªã«ã¯ãJoomla ã® comfields SQL ã€ã³ãžã§ã¯ã·ã§ã³è匱æ§ïŒCVE-2017-8917ïŒã«å¯Ÿãããã·ã³ãã«ã§ CTF åãã®æŠå¿µå®èšŒïŒPoCïŒã³ãŒããå«ãŸããŠããŸããç®æšã¯ãã¯ãŒã¯ãããŒã軜éã«ä¿ã¡ã€ã€ãæ€åºãåæãããŒã¿æœåºãšããå®å šãªãšã¯ã¹ããã€ãã®æµãã瀺ãããšã§ãã CVE-2017-8917 æŠèŠ èåŒ±æ§ : Joomla ã® comfields ã³ã³ããŒãã³ãã«ããã SQL ã€ã³ãžã§ã¯ã·ã§ã³ã æ ¹æ¬åå : listfullordering...