6602 matches found
CVE-2024-9291 kalvinGit kvf-admin XML File cross site scripting
A vulnerability classified as problematic has been found in kalvinGit kvf-admin up to f12a94dc1ebb7d1c51ee978a85e4c7ed75c620ff. Affected is an unknown function of the file /ueditor/upload?configPath=ueditor/config.json&action=uploadfile of the component XML File Handler. The manipulation of the...
GO-2024-3130 CoreDNS vulnerable to TuDoor Attacks in github.com/coredns/coredns
CoreDNS vulnerable to TuDoor Attacks in github.com/coredns/coredns...
Mozilla: User API Key leakage in Github commit leads to unauthorized access to sql.telemetry.mozilla.org
A Mozilla employee's API token for https://sql.telemetry.mozilla.org was leaked in one of the Github repos. The token provided access to the service dashboard which contained confidential data. The API token was rotated and removed from the service...
GO-2024-3119 Path traversal vulnerability in stripe-cli in github.com/stripe/stripe-cli
Path traversal vulnerability in stripe-cli in github.com/stripe/stripe-cli...
CVE-2024-8413 Cross Site Scripting (XSS) in Raspcontrol
Cross Site Scripting XSS vulnerability through the action parameter in index.php. Affected product codebase https://github.com/Bioshox/Raspcontrol and forks such as https://github.com/harmon25/raspcontrol . An attacker could exploit this vulnerability by sending a specially crafted JavaScript...
Windows IIS HTTP Protocol Stack Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows IIS HTTP Protocol Stack DOS', 'Description' = %q This module exploits CVE-2021-31166, a UAF bug in http.sys when parsing specially crafte...
CVE-2024-42852
creationtimestamp| type| source ---|---|--- 2024-08-23 21:19:09+00:00| seen| https://t.me/cvedetector/4036 2025-07-16 13:29:15+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-42852.yaml 2025-07-17 21:02:26+00:00| seen|...
GO-2022-1171 Alist vulnerable to Path Traversal in github.com/alist-org/alist
Alist vulnerable to Path Traversal in github.com/alist-org/alist...
GO-2022-1161 AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist...
GO-2022-1151 Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman
Buildah as part of Podman vulnerable to Link Following in github.com/containers/podman...
GO-2022-0892 Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd
Improper Restriction of Excessive Authentication Attempts in Argo API in github.com/argoproj/argo-cd...
GO-2022-0912 Predictable SIF UUID Identifiers in github.com/sylabs/sif
Predictable SIF UUID Identifiers in github.com/sylabs/sif...
GO-2022-0816 Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault
Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault...
GO-2022-0780 Improper Authentication in InfluxDB in github.com/influxdata/influxdb
Improper Authentication in InfluxDB in github.com/influxdata/influxdb...
GO-2022-0649 Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker
Symlink Attack in Libcontainer and Docker Engine in github.com/docker/docker...
GO-2022-0752 Privilege Escalation in Docker in github.com/docker/docker
Privilege Escalation in Docker in github.com/docker/docker...
GO-2022-0708 Arbitrary File Override in Docker Engine in github.com/docker/docker
Arbitrary File Override in Docker Engine in github.com/docker/docker...
GO-2022-0640 Arbitrary Code Execution in github.com/docker/docker
Arbitrary Code Execution in github.com/docker/docker...