bash-4.2-fixed-CVE-2014-6271

Einführung Dies ist GNU Bash, Version 4.2. Bash ist die Bourne Again SHell des GNU-Projekts, eine vollständige Implementierung der POSIX-Shell-Spezifikation, aber auch mit interaktiver Befehlszeilenbearbeitung, Jobkontrolle auf Architekturen, die dies unterstützen, csh-ähnlichen Funktionen wie...

CVE-2023-34152

CVE-2023-34152 Vulnerabilità RCE che colpisce ImageMagick 6.9.6-4. Questa vulnerabilità permette all'attaccante di eseguire comandi sul sistema vittima, consentendo quindi l'esecuzione remota di comandi. Questa è una POC ispirata dalla scoperta di fullwaywang di CVE-2023-34152. Divulgazione della...

CVE-2019-1064

CVE-2019-1064 CVE-2019-1064 - AppXSVC Escalata dei privilegi locale Sembra che questo potrebbe non essere stato risolto come previsto. PoC temporaneamente non disponibile...

CVE-2022-30190_Temporary_Fix

🩹CVE-2022-30190 Temporäre Problemumgehung🩹 Dies sind zwei Python-Skripte, die kompiliert wurden, um einfach und schnell einen temporären Schutz gegen die CVE-2022-30190-Schwachstelle Follina anzuwenden. Beide könnten besser programmiert sein, aber dies dient nur dazu, es so schnell wie möglich...

CVE-2020-0041

CVE-2020-0041 Questo repository contiene il codice per sfruttare CVE-2020-0041, un bug che abbiamo segnalato a Google nel Dicembre 2019 ed è stato corretto nel bollettino sulla sicurezza Android di Marzo 2020. Puoi trovare l'exploit per l'escape dalla sandbox in sandbox/. L'analisi del bug e...

CVE-2019-9053-Fixed

L'utente si assume ogni responsabilità per qualsiasi azione intrapresa utilizzando questo strumento. Se questi termini non sono accettabili, non utilizzare questo strumento. Usalo solo in ambienti in cui ti è consentito svolgere attività di pentesting Correzioni di bug per l'exploit CVE-2019-9053...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect vor Version 4.4.1 ist anfällig für nicht authentifizierte Remote-Codeausführung. Beachten Sie, dass diese Schwachstelle durch die unvollständige Behebung von CVE-2023-37679 verursacht wird. ERSTENS: ICH ÜBERNEHME KEINE VERANTWORTUNG FÜR DAS, WAS DU...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.3-0.3.hum1 aarch64, x8664 grafana13.1-13.1.3-0.3.hum1.src src Security Fixes: grafana13.1: CVE-2026-6322 CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172...

lblfixer_cve2020_5250

LabelGrup Networks, partner ufficiale PrestaShop Modulo per PS 1.7.X per correggere la vulnerabilità CVE-2020-5250 WIP Controlla: https://vulners.com/cve/CVE-2020-5250 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-mhfc-6rhg-fxp3 Visita il nostro sito web:...

CVE-2019-10149-quick

CVE-2019-10149-quick Semplice correzione rapida per shell Bash CVE-2019-10149...

printix-CVE-2022-29552

CVE-2022-29552 Einfache Veröffentlichung | Druckfreundlich Eine Sicherheitsanfälligkeit vom Typ „Incorrect Use of Privileged APIs“ in PrintixService.exe, in Kofax Printix’ „Printix Secure Cloud Print Management“, Version 1.3.1156.0 und niedriger, erlaubt es einem lokalen oder entfernten Angreifer...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Configurazione del laboratorio root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000...

Oracle Business Intelligence/XML Publisher - XML External Entity Injection

Oracle Business Intelligence and XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 are vulnerable to an XML external entity injection attack. id: CVE-2019-2616 info: name: Oracle Business Intelligence/XML Publisher - XML External Entity Injection author: pdteam severity: high description: Oracle...

Apache Tapestry - Remote Code Execution

Apache Tapestry contains a critical unauthenticated remote code execution vulnerability. Affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. Note that this vulnerability is a bypass of the fix for CVE-2019-0195. Before that fix it was possible to download arbitrary class files from the...

aiohttp - Directory Traversal

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...

Easy!Appointments <1.4.3 - Broken Access Control

Easy!Appointments prior to 1.4.3 allows exposure of Private Personal Information to an unauthorized actor via the GitHub repository alextselegidis/easyappointments. id: CVE-2022-0482 info: name: Easy!Appointments 1.4.3 - Broken Access Control author: francescocarlucci,opencirt severity: critical...

Scoold < 1.64.0 - Authentication Bypass

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT...

JumpServer > 3.6.4 - Information Disclosure

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not...

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

Export WP Page to Static HTML & PDF WordPress plugin = 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger...

Vite - Arbitrary File Read

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import&raw?? to the URL bypasses this limitation and returns the file content if it...