117 matches found
CVE-2019-12725-Command-Injection
PoC CVE-2019-12725-リモートコマンド実行 ZeroShell 3.9.0 リモートコマンドインジェクション ZeroShell 3.9.0 は、リモートコマンド実行の脆弱性の影響を受けます。具体的には、Web アプリケーションが一部の HTTP パラメータを適切に処理しないために発生します。認証されていない攻撃者は、この脆弱性を悪用して、脆弱なパラメータ内に OS コマンドを注入することが可能です。 エクスプロイトの使用方法 コマンド: $ sudo python ZeroShellRCE.py -u 参照:...
BurpSentinel
Burp Sentinel ウェブアプリケーションの一般的なセキュリティホールの発見を容易にします。 イントロ / チュートリアル: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction ブログ: http://dobin.github.io/ BurpSentinel を使うと、ペネトレーションテスターは HTTP リクエストのパラメータに対して、悪意のあるリクエストをすばやく簡単に大量に送信できます。それだけでなく、攻撃リクエストに対応する HTTP...
CVE-2022-23642
Sourcegraph Gitserver 3.37.0 RCE CVE-2022-23642 の PoC 3.37.0 より前の Sourcegraph では、gitserver サービスにリモートコード実行の脆弱性があります。これは、git config の実行に制限がないためであり、"core.sshCommand" を HTTP 引数に渡すことができ、任意の bash コマンドを含めることができます。この攻撃は、gitserver が攻撃者に公開されている場合にのみ可能です。これは Sourcegraph 3.36.3 でテストされています。 Docker テストのセットアップ...
Arjun
Arjun HTTPパラメータ発見スイート Arjunとは？ ArjunはURLエンドポイントのクエリパラメータを発見できます。意味がわからなくても大丈夫です。読み進めてください。 Webアプリケーションはユーザー入力を受け付けるためにパラメータ（またはクエリ）を使用します。次の例を考えてみてください。 http://api.example.com/v1/userinfo?id=751634589...
CVE-2026-69093
Admidio before 5.0.11 does not validate the admcsrftoken in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters delete and copy. An attacker can trick an authenticated administrator into visiting a crafted URL to delete ...
CVE-2026-58477
SIP (Sustainable Irrigation Platform) up to version 5.2.16 contains a mass assignment flaw where the value-setting interface copies every HTTP parameter into internal settings without whitelisting. This enables unauthenticated attackers to overwrite sensitive configuration such as the passphrase ...
Linux Distros Unpatched Vulnerability : CVE-2026-53448
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQ...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-54419
PIAF-HMS (PBX-In-A-Flash Hotel Management System) contains multiple unauthenticated SQL injection vulnerabilities. The app has no authentication and passes user-supplied HTTP parameters directly into deprecated mysql_query() calls via string concatenation, without sanitization, escaping, or param...
GHSA-F3RG-XQJJ-CJ9W n8n-MCP: Workflow telemetry sanitizer could retain partial values from URL-shaped node parameters
Summary In affected versions of n8n-mcp, the workflow telemetry sanitizer could retain partial fragments of URL-shaped node parameters before sending workflow data to the project's anonymous telemetry backend. Values placed in HTTP-Request-style node parameters — such as customer or tenant...
CVE-2026-22209
wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags. Attackers with admin access can inject payloads like alert1...
CVE-2019-12741
XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafte...
CVE-2019-12725
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters...
CVE-2025-65202: Improper Neutralization of Special Elements used in an OS Command
TRENDnet TEW-657BRM 1.00.1 has an authenticated remote OS command injection vulnerability in the setup.cgi binary, exploitable via the HTTP parameters "command", "todo", and "nextfile," which allows an attacker to execute arbitrary commands with root privileges...
EUVD-2004-1553
Malware in sbrugna...
EUVD-2020-29701
Malware in sbrugna...
EUVD-2017-12975
Malware in sbrugna...