18640 matches found
go-get-rce
This repository does not have a README...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronized bitmapgetstats with the lifetime of the bitmap. After the commit with the code ec6bb299c7c3 “md/md-bitmap: add ‘syncsize’ into struct mdbitmapstats, a panic is reported: Oops: General Protection Fault,...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fixed a memory leak in the .getmodes function. The duplicated EDID values are never freed. This issue needs to be addressed...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerabilities have been resolved: Thermal: Fix NULL pointer dereferencing in ofthermal functions. ofparsethermalzones parses the thermal-zone node and registers a thermalzone device for each subnode. However, if a thermal zone uses a thermal sensor, and that...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mm/swapfile: condresched was added to getswappages. A softlockup still occurs in getswappages under memory pressure. With 64 CPU cores, 64GB of memory, and 28 zram devices, the size of each zram device is 50MB, and they all have...
CVE-2026-63269
LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the local files and remote URLs it listed while the document loaded, and their contents could end up in the document. In...
CVE-2026-63267 LFI and GET SSRF via calcext:data-mappings and csv provider
LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...
CVE-2024-9796
CVE-2024-9796 PoC SQLi - CVE-2024-9796 针对 CVE-2024-9796 漏洞的功能性 PoC，该漏洞影响 WordPress 的 WP Advanced Search（自动补全）插件，允许通过未净化的 GET 参数进行 SQL 注入。 📌 描述 该漏洞允许攻击者通过自动补全端点的 t 参数注入任意 SQL 查询： /wp-content/plugins/wp-advanced-search/class.inc/autocompletion/autocompletion-PHP5.5.php ⚠️ 仅限教育用途及授权环境使用 。 🧰 要求 Python...
CVE-2025-55885
CVE-2025-55885 Description SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Ligne before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php Attack Vectors SQL injection via unsanitized GET parameter ocid on...
CVE-2025-24893-PoC
CVE-2025-24893 – XWiki Remote Command Execution Proof of Concept Overview This repository contains a controlled Proof of Concept PoC for CVE-2025-24893 , an unauthenticated Remote Command Execution RCE vulnerability affecting XWiki. The vulnerability allows an attacker to execute arbitrary...
CVE-2025-47423
CVE-2025-47423 – Local File Inclusion in Personal Weather Station Dashboard 12lts Discovered by: Matthew Eagle Status: Public Disclosure Date Reported: 2025-05-05 CVE ID: CVE-2025-47423 🧩 Summary A Local File Inclusion LFI vulnerability in the Personal Weather Station Dashboard version 12lts allo...
semcms
Semcms 简介 SEMCMS 是一个支持多语言的外贸网站内容管理系统（CMS）。 v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip 漏洞原因： /xcR45qAdmin/SEMCMSMenu.php 第66行 漏洞代码： query"SELECT FROM scmenu WHERE ID=" . $GET"ID"; ? 可以看出，这里的 ID 在通过 GET 传递参数时会执行 SQL 语句 过滤代码位于 /Include/contorl. PHP 第151行 function...
PT-2026-106217
Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists where the get-page RPC Remote Procedure Call accepts a share-link permission object providing broad read access but fails to verify if the requested page-id is among the pages...
CVE-2026-88397
The software ApiAdmin version 5.0 and before is vulnerable to SQL Injection (CWE-89) within the user-list endpoint. The vulnerability is located in the GET /admin/User/getUsers functionality and is triggered via the gid parameter. An attacker could potentially exploit this to perform unauthorized...
PT-2026-106214
Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the unauthenticated get-view-only-bundle RPC Remote Procedure Call that returns all share-link rows for a file, regardless of whether the caller authenticated with a single scoped...
go-get-rce
This repository does not have a README...
CVE-2024-29895.py
Cacti RCE - CVE-2024-29895 Uso: python3 cve-2024-29895.py -u https://target.com/ -c id Afecta a las versiones de Cacti 1.3.X en compilaciones DEV donde cmdrealtime.php está presente y POLLERID está habilitado. La inyección de comandos es posible a través de este endpoint, mediante una solicitud G...
Grafana-CVE-2021-43798
Grafana-CVE-2021-43798 Grafana File-Read 影响版本：8.0.0-lastest Poc-http-get /public/plugins/plugins-lst/../../../../../../../../filename Default plugins-lst alertlist annolist grafana-azure-monitor-datasource barchart bargauge cloudwatch dashlist elasticsearch gauge geomap gettingstarted stackdriver...
CVE-2018-11776
CVE-2018-11776 Investigation of CVE-2018-11776 vulnerability that allows attackers to remotely execute code and gain control over Apache Struts-based applications. Install and Exploiting https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Suricata In the file "test.rules " presents a rule for t...