65 matches found
Pentest-Collaboration-Framework
Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links Links | ---|--- 📖Installation Guide | 🌐Wiki 🚀Releases 💬Telegram...
CVE-2016-4437
shiro-1.2.4-脆弱性ツール rememberMeの値をデコードし、対応するclassファイルをエクスポートします 使い方 xk-mt-rememberMe解码.py 実行説明：実行後、まず鍵を入力するか、Enterキーを押してデフォルトの鍵'kPH+bIxk5D2deZiIxcaaaA=='を使用します。次にリクエストパケット内のrememberMe値を入力します。解析後、エクスポートするファイル名の入力を求められ、自動的にclassが付加されます。エクスポートしない場合はそのままEnterキーを押します。 実行方法：python xk-mt-rememberMe解码.py...
EUVD-2026-89468
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...
CVE-2026-71379
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...
CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...
CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...
CVE-2026-71379
The Toptech TMS7 and TopHAT systems are affected by a vulnerability in the file export endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to export arbitrary database tables . This flaw allows for unauthorized access to sensitive data. While specific exploit...
PT-2026-102907
Name of the Vulnerable Software and Affected Versions Toptech TMS7 versions prior to 7.8 Description An unauthenticated attacker can export arbitrary database tables by sending a crafted POST request to the file export endpoint. Recommendations Upgrade Toptech TMS7 to version 7.8...
PT-2026-37298
Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to 29.0 Description The unauthenticated 'plugin/Scheduler/downloadICS.php' endpoint passes attacker-controlled title, description, and joinURL parameters into the Scheduler::downloadICS function, which utilizes the I...
CVE-2022-33180
A vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5 could allow a local authenticated attacker to export out sensitive files with “seccryptocfg”, “configupload”...
EVE-NG 安全漏洞
EVE-NG is a clientless multi-vendor network emulation software from EVE-NG, Inc. A security vulnerability exists in EVE-NG version 6.4.0-13-PRO, which originates from directory traversal in the /api/export interface and could lead to the export of arbitrary files...
EUVD-2012-3765
Malware in sbrugna...
EUVD-2021-7481
Malicious code in bioql PyPI...
EUVD-2023-59235
Malicious code in bioql PyPI...
EUVD-2024-22369
Malicious code in bioql PyPI...
EUVD-2022-44861
Malicious code in bioql PyPI...
CVE-2024-27113
An unauthenticated Insecure Direct Object Reference IDOR to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database by exporting it as a CSV file. The vulnerability...
CVE-2022-3558
The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files...
CVE-2021-20018
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier...