839571 matches found
CVE-2022-38813
CVE-2022-38813 Veritical Privilege Escalation via user parameter in Blood Donor Management System Using Codeigniter v 1.0 Technical description: Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete t...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
CVE-2022-42094
Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...
CVE-2023-25690
CVE-2023-25690 Description of CVE-2023-25690: Some modproxy configurations on Apache HTTP Server from version 2.4.0 to 2.4.55 allow HTTP Request Smuggling attacks a technique that interferes with the way a website processes HTTP request sequences received from one or more users. These...
CVE-2023-36845
CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...
CVE-2026-86513
A remote, unauthenticated resource allocation vulnerability exists in the JSON Pointer parser component of java-json-tools jackson-coreutils 2.0 , specifically in the TreePointer.tokensFromInput function within TreePointer.java. The flaw can be triggered remotely without authentication, resulting...
EUVD-2026-72614
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
CVE-2024-40110
CVE-2024-40110 - Poultry Farm Management System v1.0 Exploit para Poultry Farm Management System v1.0 Após encontrar um exploit no site Exploit-DB e o mesmo não funcionar, decidi realizar uma revisão no código e aprimorá-lo para adequar a necessidade. Uma vez que funcionou, decidi então, melhorar...
CVE-2022-42889-text4shell
CVE-2022-42889-text4shell 🔥🔥🔥 Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit. Details📃 CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10 The vulnerability has been compared to Log4Shell since it is an...
CVE-2021-44228
Log4j Vulnerability - CVE-2021-44228 📗 Introduction This vulnerability was discovered on December 9, 2021, identified with CVE-2021-44228 , this flaw affects the java log package, generating a Severity Score CVSS of 10 points , providing execution of remote access to the host. This vulnerability...
CVE-2021-26084
CVE-2021-26084 This is exploit wikipoc.py -u http://xxxxx.com -p /pages/createpage-entervariables.action?SpaceKey=x...
CVE-2024-38856_Scanner
CVE-2024-38856 For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your responsibility. CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit The CVE Analysis: https://blog.securelayer7.net/cve-2024-38856-apache-ofbiz-rce This issue affects Apache...
CVE-2019-13496
CVE-2019-13496 Título del exploit: Bypass de OTP verificación de integridad fallida Fecha: 07/10/2019 Autor del exploit: Furqan Khan Página principal del proveedor: https://www.oneidentity.com/ Enlace del software: https://www.oneidentity.com/products/cloud-access-manager/ Versión: 8.1.3 Probado...
CVE-2023-34598
Gibbon v25.0.0 - Inclusión de Archivos Locales - CVE-2023-34598 Gibbon v25.0.0 es vulnerable a una vulnerabilidad de Inclusión de Archivos Locales LFI donde es posible incluir el contenido de varios archivos presentes en la carpeta de instalación en la respuesta del servidor. Prueba de Concepto...
kali-docker
Official Kali Linux Docker This Kali Linux Docker image provides a minimal base install of the latest version of the Kali Linux Rolling Distribution. There are no tools added to this image, so you will need to install them yourself. For details about Kali Linux metapackages, check...
CVE-2016-8655_Android
CVE-2016-5195 GoldFish 3.4 This works on the goldfish 3.4 Emulator Initroot: https://alephsecurity.com/2017/06/07/initroot-moto/ has been released for my device harpia, so I have stopped porting the exploit to my device harpia/.... I have learnt a large amount from working on this project, but...