Lucene search
+L

1282 matches found

Kitploit
Kitploit
added 2026/08/25 11:25 p.m.2 views

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 Проявите поддержку — поставьте ⭐️, если вам понравился контент | ПОДЕЛИТЬСЯ в Twitter | Следите за мной в CVE-2022-0337 Утечка системных переменных окружения в Google Chrome, Microsoft Edge и Opera 📝 Описание Успешная эксплуатация этой уязвимости может привести к утечке секретов пользователя,...

6.5CVSS0.01277EPSS
SaveExploits2References1
EUVD
EUVD
added 2026/08/25 5:31 p.m.4 views

EUVD-2026-65621

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...

5.5CVSS5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 2:18 p.m.1 views

CVE-2021-21123-PoC-Google-Chrome

📝 Описание Google Chrome — File System Access API — уязвимости, сообщённые Maciej Pulikowski Общая сумма вознаграждения Bug Bounty: $5.000 Это Proof of Concept для: Google SecuritySeverity CVE ВЫСОКИЙ CVE-2021-21123 СРЕДНИЙ CVE-2021-21129 СРЕДНИЙ CVE-2021-21130 СРЕДНИЙ CVE-2021-21131 СРЕДНИЙ...

8.1CVSS6AI score0.09966EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/25 5:20 a.m.1 views

Jenkins-CVE-2024-23897

Jenkins CVE-2024-23897 PoC Доказательство концепции PoC для CVE-2024-23897 — уязвимость произвольного чтения файлов во встроенном интерфейсе командной строки CLI Jenkins. Она позволяет неаутентифицированным злоумышленникам с разрешением Overall/Read читать произвольные файлы в файловой системе...

9.8CVSS8.8AI score0.99999EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/08/25 4:16 a.m.1 views

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion — это платформа быстрой разработки для создания и развёртывания веб- и мобильных приложений. CVE-2024-20767 — версии ColdFusion 2023.6, 2021.12 и более ранние затронуты уязвимостью неправильного контроля доступа, которая может привести к...

7.4CVSS8AI score0.98514EPSS
SaveExploits7
Wolfi
Wolfi
added 2026/08/13 8:53 p.m.12 views

CVE-2026-73429 vulnerabilities

Vulnerabilities for packages: yazi...

5.3CVSS5.2AI score0.00291EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/08/13 8:26 p.m.7 views

CVE-2026-73429 vulnerabilities

Vulnerabilities for packages: yazi...

5.3CVSS5.2AI score0.00291EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/08/12 8:24 p.m.13 views

GHSA-M65R-RPRJ-R5RG vulnerabilities

Vulnerabilities for packages: yazi...

5.2AI score
SaveExploits0
CVE
CVE
added 2026/08/10 10:41 a.m.47 views

CVE-2026-72593

The CVE-2026-72593 entry concerns dulldusk/phpfm up to version 1.8.0, where a missing authentication flaw permits an unauthenticated remote attacker to access the full file management capabilities (read, write, delete, upload) on the server filesystem. The root cause is an authentication check in...

9.8CVSS5.5AI score0.00527EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 9:49 a.m.58 views

CVE-2026-54218

CVE-2026-54218 affects Tobit Laboratories AG TeamDavid’s Webbox. The issue stems from use of a hard-coded cryptographic key and password storage across locally created users in David, where passwords are stored in various files using only obfuscation. If an attacker can access the server’s file s...

8.8CVSS5.3AI score0.00271EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 6:27 p.m.14 views

EUVD-2026-53574

IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agentic Assistant validation due to improper handling of LLM‑generated components. The application executes model‑generated Python code in the backend during validation prior to user...

8.1CVSS5.7AI score0.00299EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/07/31 12:00 a.m.9 views

Adobe Campaign Classic SQL Injection Vulnerability

Adobe Campaign Classic is a marketing activity management platform developed by the American company Adobe. Adobe Campaign Classic has a SQL injection vulnerability, which stems from improper handling of special elements in SQL commands. Attackers can exploit this vulnerability to gain access to...

8.6CVSS6AI score0.00592EPSS
SaveExploits0
NVD
NVD
added 2026/07/30 3:16 a.m.10 views

CVE-2026-48448

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS0.00592EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/30 2:48 a.m.10 views

CVE-2026-48448 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to gain file system read access. Exploitation of this issu...

8.6CVSS5.9AI score0.00592EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 12:02 p.m.13 views

EUVD-2026-49766

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...

6.8CVSS5.8AI score0.00133EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/28 12:02 p.m.33 views

CVE-2026-41874

CVE-2026-41874 affects Quick.Cart; hard-coded, plaintext admin credentials stored in a configuration file allow local access to credentials when an attacker can access the server filesystem, potentially enabling privilege escalation. Only version 6.7 was tested; all versions are considered vulner...

6.8CVSS5.8AI score0.00133EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/28 12:02 p.m.37 views

CVE-2026-41874 Hard-coded admin credentials in Quick.Cart

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...

6.8CVSS0.00133EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/24 6:35 p.m.9 views

GO-2026-5740 Hugo's Node tool execution allows file system access outside the project directory in github.com/gohugoio/hugo

Hugo's Node tool execution allows file system access outside the project directory in github.com/gohugoio/hugo...

8.6CVSS6AI score0.00274EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.8 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in File System Access in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.9AI score0.00201EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/07/23 11:04 a.m.8 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: High...

4.2CVSS5.9AI score0.00153EPSS
SaveExploits0References2
Rows per page
Query Builder