CVE-2024-40457-PoC

CVE-2024-40457-PoC CVE PoC 2024-40457 Будьте осторожны с флагами -g, посмотрите на картинку...

vaas

Verdict-as-a-Service Verdict-as-a-Service VaaS — это облачный сервис, предоставляющий возможности сканирования файлов на вредоносное ПО и другие угрозы. Он позволяет легко интегрировать обнаружение вредоносных программ в ваше приложение с помощью нескольких строк кода. VaaS можно использовать для...

G Auto-Hyperlink <= 1.0.1 - SQL Injection

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leading to an authenticated SQL injection id: CVE-2021-24627 info: name: G Auto-Hyperlink = 1.0.1 - SQL...

CVE-2025-68001

CVE-2025-68001 WordPress плагин g-FFL Checkout 📡 Опережайте события. Присоединяйтесь к @KNxploited в Telegram — ваш эксклюзивный источник последних CVE, zero-day и передовых исследований эксплойтов. Обновляется постоянно. Не для всех. 📋 Обзор CVE-2025-68001 — это критическая уязвимость...

CVE-2025-12720

g-FFL Cockpit 'POST', 36: 'callback' = CLASS, 'handleenqueueonly', 37: 'permissioncallback' = fn = self::fflcockpitisallowedself::$fflckey, 38: ; fflcockpitisallowed 関数は、プラグインのソースコードで確認できるハードコードされた IP アドレス base64: My4yMTIuMTg1LjE4Nw==、デコード後: 3.212.185.187 を使用します。 class-sync-endpoint.php の脆弱なスニペット...

CVE-2026-56111

CVE-2026-56111 - Выход за границы записи в Marlin M421 Доказательство концепции для CVE-2026-56111 , выхода за границы записи в обработчике G-кода M421 прошивки Marlin Firmware, собранной с MESHBEDLEVELING. Консультация:...

CVE-2025-12721

g-FFL Cockpit 'returntrue'로 등록되어 인증되지 않은 방문자도 완전히 접근할 수 있습니다. 위치: class-sync-endpoint.php: 88: registerrestroute'fflcockpit/v1', '/serverstatus', 89: 'methods' = 'GET', 90: 'callback' = CLASS, 'handleserverstatus', 91: 'permissioncallback' = 'returntrue', // Public endpoint 92: ; handleserverstat...

Logitech-G-Cloud-GhostLock-CVE-2026-43499

Logitech G Cloud · GhostLock CVE-2026-43499: попытка получения root Logitech G Cloud — CVE-2026-43499 GhostLock Root Attempt ⚠️ Только для исследовательских и оборонительных целей / For research and defensive purposes only Все содержимое этого репозитория создано DeepSeek AI и предназначено только...

@cotecna/stencil-components (>=3.0.0, <=3.2.1), meta-g (>=1.0.0, <=1.0.494998) +1 more potentially affected by CVE-2026-103922 via @capacitor/ios (>=6.0.0-nightly-20240307T150431.0, <=6.1.2)

@capacitor/ios NPM version =6.0.0-nightly-20240307T150431.0, =3.0.0, =1.0.0, =1.0.0, =1.1.6 Source cves: CVE-2026-103922 Source advisory: OSV:GHSA-RVM3-566M-V7FV...

Astra Linux – Vulnerability in ntfs-3g

An invalid return code in fusekernmount allows for intercepting the libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite...

Exploit for CVE-2026-103956

abraxaslabs.tech · github.com/abraxas ·&...

PT-2026-104346

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument g name results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

CVE-2026-97520

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

CVE-2026-87167

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87127

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. While the...

CVE-2026-87167

CVE-2026-87167 affects Oracle Purchasing (component: G-Invoicing ) in Oracle E-Business Suite , versions 12.2.11 through 12.2.15 . The vulnerability is exploitable over the network via HTTP by a low-privileged attacker with no user interaction, allowing unauthorized creation, deletion, or modific...

EUVD-2026-79823

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.10-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...

CVE-2026-87168

A vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: G-Invoicing ) affects supported versions 12.2.10 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction. Successful ...

EUVD-2026-79822

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: G-Invoicing. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful...