CVE-batdappboomx

CVE ID CVE-2022-27134 产品 batdappboomx 是一个运行在 EOSIO 区块链 上的公开智能合约。该智能合约向参与者奖励加密货币，但前提是他们需要事先支付一些加密货币。 版本 该智能合约的最新版本。智能合约的 SHA256 哈希值为 1327c04cf4b56183eddb1a897bbebf5a873d3421272b708829a4ed0765bef820 可在区块浏览器 https://bloks.io/account/batdappboomx 查看。 问题类型 访问控制漏洞 描述 batdappboomx 并非开源，但我们通过 WASAI...

GHSA-VR5F-W35Q-98JP Perses's unvalidated project parameter enables filesystem path traversal

Impact When Perses is using the file system database, on the list endpoints, the project value is bound from the request into the resource Query struct and is never validated against directory-traversal characters validation/Flatten only runs for Create/Update bodies, not list queries. The path i...

Perses's unvalidated project parameter enables filesystem path traversal

Impact When Perses is using the file system database, on the list endpoints, the project value is bound from the request into the resource Query struct and is never validated against directory-traversal characters validation/Flatten only runs for Create/Update bodies, not list queries. The path i...

EUVD-2026-83268

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

CVE-2026-63445 Perses: Unvalidated project parameter enables filesystem path traversal

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

CVE-2026-63445 Perses: Unvalidated project parameter enables filesystem path traversal

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

CVE-2026-63445

Perses , an open-source observability dashboard, is affected by a filesystem path traversal vulnerability (CVSS 4.0: 7.1 HIGH ) in its list endpoints when the file-system database backend is active. The request-controlled project query parameter is bound into the resource Query struct without val...

CVE-2026-63445 Perses: Unvalidated project parameter enables filesystem path traversal

Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

CVE-2026-68513

A flaw was found in PyOpenEXR, a component of OpenEXR. A heap buffer overflow can occur when processing a specially crafted EXR image file. This vulnerability is triggered by a channel-name key collision between literal and prefixed RGB channels, causing the software to write data beyond the...

CVE-2026-59982

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted deep EXR image file, which, when processed by a user, could lead to an out-of-bounds pointer being returned by the TypedDeepImageChannel::row function. This vulnerability could cause the application to crash Denial o...

CVE-2026-59186

A flaw was found in OpenEXR, a widely used image format library. A remote attacker could exploit this by providing a specially crafted tiled EXR file. When processed on a 32-bit system, an integer overflow occurs during buffer size calculation, leading to a heap out-of-bounds write. This could...

CVE-2026-59981

A flaw was found in OpenEXR. An attacker can craft a malicious deep EXR image file that, when opened by an application, can lead to an out-of-bounds read in the OpenEXRUtil library's SampleCountChannel::row API. This vulnerability can result in information disclosure, where adjacent heap memory i...

CVE-2026-59184

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...

CVE-2026-59187

A flaw was found in OpenEXR. The exrmetrics tool is vulnerable to a heap out-of-bounds write when processing a specially crafted deep scanline EXR image. This occurs during pixel conversion operations, where the tool attempts to write floating-point data into buffers allocated for half-float data...

ghostlock-x200-root

GhostLock-X200 v1.3.5 ⚠️ 法律与安全声明（请务必先阅读） 本仓库仅用于安全研究与教育目的 ，并且只允许在你自己拥有、或已获得明确 书面授权的设备上使用 。未经授权对他人设备使用本工具，可能违反当地法律法规。 使用本工具可能导致设备异常重启、数据损坏、系统异常、保修失效等后果，请自行 评估风险。作者不对任何直接或间接损害承担责任，亦不对任何滥用行为负责。 继续阅读或使用本仓库，即表示你已理解并同意自行承担全部风险与责任。 针对 vivo X200（PD2415 / Dimensity 9400 / b57 内核） 、基于...

grype v0.119.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 描述 CVE-2023-36845 是一项值得注意的 PHP 环境变量操纵漏洞，影响 Juniper SRX 防火墙和 EX 交换机。虽然 Juniper 将此漏洞归类为中等严重性，但在本文中，我们将阐述如何利用这一单一漏洞实现远程、未经身份验证的代码执行。 搜索 - Shodan root@kitploit: title:"Juniper Web Device Manager" root@kitploit: title:"Juniper" http.favicon.hash:2141724739 使用方法 🛠 检测 root@kitploit: pytho...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...

Google-Nest-Cam-Bug-Disclosures

Google-Nest-Cam-Bug-Disclosures Afectados: Dropcam Pro, modelos Nest Cam Indoor/Outdoor Última compilación afectada: 205-600052 Compilación parcialmente corregida: 205-600055 ACTUALIZACIÓN La última versión de firmware 205-600055 no corrige la vulnerabilidad de desasociación WiFi en Dropcam Pro. ...

exploits

漏洞利用 由 Xiphos Research 为测试目的编写的各类概念验证漏洞利用代码。 当前漏洞利用（索引可能已过时） phpMoAdmin 远程代码执行 CVE-2015-2208 LotusCMS 远程代码执行 OSVDB-75095 ElasticSearch 远程代码执行 CVE-2015-1427 ShellShock httpd 远程代码执行 CVE-2014-6271 IISlap - http.sys 拒绝服务/RCE PoC（仅 DoS）。MS-15-034 se0wned - Seowintech 路由器 diagnostic.cgi 远程 root WPsh0pw...