CVE-2024-28752

Apache CXF CVE-2024-28752 复现环境 漏洞公告：https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt 环境启动 samples/javafirstjaxwsfactorybean IDEA 通过 ServerStarter.java 启动 webservice 服务 构建 使用 JDK8 mvn clean package java -jar target/cxf.jar 漏洞利用 使用 BurpSuite 发送如下请求即可触发。 POST /test HTTP/1.1 Host:...

CVE-2018-3760

CVE-2018-3760 Rails Asset Pipeline 目录遍历漏洞 由 Orange Tsai 发现 注意 ：默认情况下，以生产模式运行的 Rails 应用不受此漏洞影响。 漏洞利用： curl -v http://127.0.0.1:3000/assets/file:%2f%2f/usr/src/blog/app/assets/images/%252e%252e/%252e%252e/%252e%252e/config/secrets.yml%3ftype=text/yaml 安全分析...

CVE-2026-107466

A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers URIs within source download definitions, t...

thm-Moniker-Link-cve-2024-21413-writeup

TryHackMe: Moniker Link CVE-2024-21413 路径： Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 难度： 高级房间 重点： Outlook 受保护视图绕过、NTLM 哈希泄露，以及使用 Responder 捕获凭据 CVE-2024-21413 是一个严重的 Microsoft Outlook 漏洞，影响应用程序处理特制超链接的方式。通过滥用 file:// Moniker Link 格式并附加一个特殊字符，攻击者可以完全绕过 Outlook 的受保护视图——...

CVE-2023-1177

CVE-2023-1177 | | MLFlow 路径遍历 | 已在 MLflow 2.2.0 上测试 | src: https://github.com/iumiro/CVE-2023-1177-MLFlow | .. code-block:: bash !/bin/bash RAND="EXPLOIT-$1+$RANDOM%9999" URL="http://172.17.0.2:6001" FILE='/root/.ssh/idrsa' curl -vX POST "$URL/ajax-api/2.0/mlflow/registered-models/create" -d...

CVE-2021-36749

CVE-2021-36749 Apache Druid 任意文件读取 受影响版本：version = 0.21.1 使用以下两种方式均可 命令行方式 curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

CVE-2026-74246

A flaw was found in Red Hat Quay's custom build trigger handler. This vulnerability allows a user with organization repository administrative privileges and the FEATUREBUILDSUPPORT enabled to read arbitrary files on the build worker. This is possible due to insufficient validation of the build...

CVE-2026-61749 InvenTree: Administrative staff users can trigger Arbitrary File Read leading to Credential Disclosure

InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to retrieve attacker-selected resources through the HTTP and HTTPS URL schemes or the local file URI scheme. The...

EUVD-2026-74795

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

SUSE CVE-2026-84637

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

EUVD-2026-69703

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

Linux Distros Unpatched Vulnerability : CVE-2026-84637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executabl...

CVE-2026-84637

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

UBUNTU-CVE-2026-84637

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637

A flaw was found in Thunderbird. Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows systems. This bypasses Thunderbird's built-in protections for executable attachments, potentially leading to arbitrary code execution...

CVE-2026-84637

In Mozilla Thunderbird , malicious calendar invitations can utilize file URI attachments to execute local or network-hosted executables on Windows systems. This technique allows attackers to bypass standard executable attachment protections and may display the attachment under a misleading filena...

CVE-2026-84637 Calendar invitation attachments could launch local executables

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637 Calendar invitation attachments could launch local executables

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...

CVE-2026-84637

Malicious calendar invitations could use file URI attachments to launch local or network-hosted executables on Windows, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment could also appear under a misleading filename. This...