277993 matches found
...[ More ]
A stack-based buffer overflow vulnerability exists in the redirect CGI program distributed with thttpd. The vulnerability is caused by unsafe string concatenation when constructing redirect URLs using attacker-controlled CGI environment variables. A remote, unauthenticated attacker can trigger th...
...[ More ]
A stack-based buffer overflow vulnerability exists in the htpasswd utility bundled with thttpd. The vulnerability occurs due to unsafe copying of a user-supplied command-line argument into a fixed-size stack buffer without proper bounds checking.Specifically, the program copies the username...
Flextype CMS 1.0.0-alpha.3 Arbitrary File Read
Flextype CMS version 1.0.0-alpha.3 contains an arbitrary file-read vulnerability in its stored shortcode processing functionality. Attacker-controlled entry fields are automatically processed by the shortcode parser when global shortcode processing is enabled. Description Flextype CMS...
Flextype CMS 1.0.0-alpha.3 Code Execution
Flextype CMS version 1.0.0-alpha.3 contains a stored code execution vulnerability caused by the interaction between globally processed entry expressions, the mutable registry object exposed to expressions, and the PHP entry directive. Description Flextype CMS v1.0.0-alpha.3 contains a stored code...
...[ More ]
Flextype CMS version 1.0.0-alpha.3 contains a stored server-side request forgery SSRF vulnerability in its shortcode-processing functionality. Attacker-controlled entry fields can be automatically processed by Flextype's shortcode parser. The built-in fetch shortcode accepts an attacker-controlle...
O-CMS 1.0.0 Command Injection
O-CMS version 1.0.0 contains an authenticated OS command injection vulnerability in the AI CLI configuration functionality. An authenticated attacker with sufficient privileges can supply shell metacharacters and additional commands through the aicliscript parameter of /admin/settings/save...
Flextype CMS 1.0.0-alpha.3 Authentication Bypass
Flextype CMS version 1.0.0-alpha.3 contains an authentication validation vulnerability in the API request-processing functionality. API endpoints may declare accesstoken as a required parameter, but the required-parameter validation only verifies that the corresponding key exists in the supplied...
OpenCode Unauthenticated Remote Code Execution
OpenCode versions prior to 1.0.216 contain an unauthenticated remote code execution vulnerability that can allow a remote attacker to obtain a session identifier and execute arbitrary commands through the session shell endpoint. This proof of concept retrieves an available session and demonstrate...
Flextype CMS 1.0.0-alpha.3 Server-Side Request Forgery
Flextype CMS version 1.0.0-alpha.3 contains a server-side request forgery SSRF vulnerability in the expression-processing functionality exposed through the /api/v1/query endpoint. An authenticated remote attacker can supply an arbitrary URL to the exposed fetch function, causing the Flextype serv...
Flextype CMS 1.0.0-alpha.3 Expression Injection
Flextype CMS version 1.0.0-alpha.3 contains a stored arbitrary expression injection vulnerability in the Entries ExpressionsDirective. An authenticated remote attacker with sufficient privileges to create or modify entries can persist arbitrary expression syntax within an entry field. Description...
Lutece Core 7.1.7 Remote Code Execution
Lutece Core versions 7.1.7 and below suffer from an authenticated remote code execution vulnerability via XSLT injection. CVE-2026-4813 CVSS-B 9.4 CRITICAL Authenticated RCE via XSLT injection in Lutece Core Explanations and more on my website xsl:variable na...
Paho 1.3.15 Path Hijacking / Code Execution
Arbitrary code execution is possible in the MQTTVersion utility of Paho version 1.3.15 due to uncontrolled loading of shared libraries using non-absolute paths. The application invokes dlopen with relative library names and relies on the dynamic loader’s search path to resolve the target library...
Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation
Payara Server exposes multiple HTTP-accessible EJB invocation mechanisms that rely on attacker-controlled reflection, dynamic class loading, and unsafe deserialization. These endpoints allow remote clients to perform arbitrary JNDI lookups, resolve attacker-supplied class names, and invoke EJB...
07-Web-Application-Security
Cybersecurity Home Lab - Lab 7: Web Application Security O...
CVE-Exploits
一个收集各种CVE漏洞的PoC（概念验证）或Exploit（漏洞利用）工具的仓库。旨在为安全研究、渗透测试提供参考和便利。...
apollo-x-ultimate
APOLLO-X ULTIMATE v1 WordPress Exploit Framework - The Dig...
hpe-exploit
Create a text file with IP addresses of remote HPE OneView devic...
Exploit for CVE-2026-65643
CVE‑2026‑65643 – cPanel Domain Parking RC...