CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 概念実証 PoC 説明 このスクリプトは、ターゲットURLまたはIPアドレスのリストに /home/userSpace/devices/debug.txt を追加して、CVE-2024-9466の脆弱性をチェックします。HTTPレスポンスステータスコードとリクエストがリダイレクトされたかどうかに基づいて、ターゲットが脆弱かどうかを判断します。 セットアップ スクリプトと同じディレクトリに targets.txt...

CVE-2024-57778

CVE-2024-57778 説明 : Orbe ONetView Roteador Onet-1200 における問題により、リモート攻撃者がサーバーの応答コードをステータスコード500からステータスコード200に変更することで権限昇格を実行できる可能性があります。 バージョン : Orbe ONetView Roteador Onet-1200 Orbe 1680210096 で発見されましたが、それ以前の全バージョンに影響します。 概念実証 ルーターのメニューページ http://192.168.1.1/menu.html にアクセスし、任意のオプションをクリックすると、500...

GHSA-2P9G-X3CV-5HH4 Private Weblate projects vulnerable to observable object existence disclosure via globally scoped object lookups

Impact The several endpoints could leak object existence information to users who had no access to it by HTTP status code 403 instead of 404. Patches https://github.com/WeblateOrg/weblate/pull/19971 References Thanks to Yaohui Wang for reporting this via GitHub...

EUVD-2018-4242

Malware in sbrugna...

EUVD-2015-1370

Malware in sbrugna...

EUVD-2013-2449

Malware in sbrugna...

EUVD-2021-2069

Malware in sbrugna...

EUVD-2013-2812

Malware in sbrugna...

EUVD-2013-0610

Malware in sbrugna...

EUVD-2023-3224

Malicious code in bioql PyPI...

EUVD-2025-29112

Malicious code in bioql PyPI...

CVE-2025-10393: Server-Side Request Forgery (SSRF)

A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been...

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

CVE-2021-38384

Serverless Offline 8.0.0 returns a 403 HTTP status code for a route that has a trailing / character, which might cause a developer to implement incorrect access control, because the actual behavior within the Amazon AWS environment is a 200 HTTP status code i.e., possibly greater than expected...

Insertion Of Sensitive Information Into Log File

github.com/elastic/beats is vulnerable to Insertion Of Sensitive Information Into Log File. The vulnerability is caused due to logging the raw event object in the WARN and ERROR level if the ingesting failed with any 4XX HTTP status code except 409 or 209. This can lead to insertion of sensitive ...

GHSA-93P6-9CXV-5RPQ juzawebCMS Incorrect Access Control vulnerability

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

Improper access control

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...

CVE-2023-46906

juzaweb = 3.4 is vulnerable to Incorrect Access Control, resulting in an application outage after a 500 HTTP status code. The payload in the timezone field was not correctly validated...