53889 matches found
Chuanhu Chat - Directory Traversal
The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...
Sonatype Nexus Repository Manager 3 - Local File Inclusion
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. id: CVE-2024-4956 info: name: Sonatype Nexus Repository Manager 3 - Local File Inclusion author: ritikchaddha severity: high description: | Path Traversal in Sonatype...
OpenCMS - Cross-Site Scripting
OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. id: CVE-2023-42343 info: name: OpenCMS - Cross-Site Scripting author: DhiyaneshDK severity: medium description: | OpenCMS below 10.5.1 is vulnerable to Cross-Site Scripting vulnerability. impact: | Unauthenticated attackers...
MOVEit Transfer - SQL Injection
In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...
XWiki DeleteApplication - Cross-Site Scripting
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates are vulnerable to a reflected XSS attack...
QNAP Music Station < 5.4.0 - Authentication Bypass
An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later id:...
monomorph
════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id ═══ MD5-Monomorphic Shellcode Packer ═══ उपयोग: python3 monomorph.py inputfile outputfile payloadfile यह क्या करता है? यह 4KB...
CVE-2022-24637
CVE-2022-24637 استغلال مُصَحَّح لـ CVE-2022-24637 الاستغلال الأصلي: https://www.exploit-db.com/exploits/51026...
ets5-password-recovery
ETS5 पासवर्ड रिकवरी टूल विषय सूची परिचय स्थापना आवश्यकताएँ पासवर्ड पुनर्प्राप्ति कैसे काम करती है? डिज़ाइन दोष कैसे खोजा गया? जोखिम को कैसे कम किया जा सकता है? समन्वित भेद्यता प्रकटीकरण लाइसेंस परिवर्तन लॉग परिचय क्या आप अपने एक ETS5 प्रोजेक्ट का पासवर्ड भूल गए हैं और अब KNX स्थापना के कॉन्फ़िगरे...
bigint-buffer-js
bigint-buffer-js بديل مباشر لـ [email protected] بدون الربط الأصلي native binding. يحتوي bigint-buffer ≤ 1.1.5 على تجاوز سعة المخزن المؤقت buffer overflow في الدالة الأصلية toBigIntLE CVE-2025-3194 / GHSA-3gc7-fjrx-p6mg ولم يتم نشر أي إصدار مُصلَّح. يتم جلبه بشكل غير مباشر عبر...
CVE-2026-65330
CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU VFS — defaultsetxattrdoubleagent tmpfs VNOP Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Fixed PAC diversifier in xattr handler pointer signing Impact: PC control from kernel context; full privile...
ROOT-APP-NPM-CVE-2026-44902 CVE-2026-44902 in @opentelemetry/auto-instrumentations-node - Patched by Root
Root has patched CVE-2026-44902 in the @opentelemetry/auto-instrumentations-node package for Root:npm. Multiple fixed versions available...
CVE-2026-3888-fixed
لا يحتوي هذا المستودع على ملف README...
Next.js-Proof-of-Concept
إثبات المفهوم لثغرات Next.js CVE يحتوي هذا المستودع على بيئات إثبات مفهوم قابلة لإعادة الإنتاج لثلاث ثغرات في Next.js. يتضمن كل إثبات مفهوم هدفًا ضعيفًا وهدفًا مُصلَحًا ونصًا برمجيًا يوضح الفرق السلوكي بينهما. الهدف من هذا المشروع هو تسهيل ملاحظة السبب الجذري والتأثير العملي لكل مشكلة في بيئة...
CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection
README.md CVE-2025-60787 डिटेक्शन: कॉन्फ़िग इंजेक्शन के माध्यम से motionEye RCE motionEye Still Images - Image File Name उदाहरण PoC पेलोड: $touch /tmp/test.%Y-%m-%d-%H-%M-%S जब motion पुनः प्रारंभ होता है, तो शेल कमांड निष्पादित होती है और /tmp/test बनाती है। डिटेक्शन कवरेज ID| डिटेक्शन नाम| विवर...
cve-2017-7494-fixed
cve-2017-7494-fixed صورة Docker مخصصة...
ROOT-OS-DEBIAN-12-CVE-2011-4116 CVE-2011-4116 in perl - Patched by Root
Root has patched CVE-2011-4116 in the perl package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-22029 CVE-2026-22029 in @remix-run/router - Patched by Root
Root has patched CVE-2026-22029 in the @remix-run/router package for Root:npm. Multiple fixed versions available...