147 matches found
CVE-2021-40444--CABless
CVE-2021-40444--CABless 버전 업데이트: CAB 아카이브에 의존할 필요가 없도록 코드를 수정했습니다 페이로드 실행을 트리거하는 "index.html" 파일에는 'script' 태그 안에 코드 한 줄만 포함됩니다: PDF 형식의 문서가 제공됩니다. 업데이트: 비디오 데모 링크 - https://www.youtube.com/watch?v=V9XD3VboEcU 참고: 샘플 RAR 파일에는 GitHub에 게시된 PoC 중 하나를 참조로 사용했기 때문에 취약점을 악용하도록 설계된 Word 문서가 포함되어 있지 않습니다...
CVE-2025-29306_poc
Описание Опубликовано: 2025-03-27 Обновлено: 2025-03-27 Проблема в FoxCMS v.1.2.5 позволяет удаленному злоумышленнику выполнить произвольный код через страницу отображения кейсов в компоненте index.html. Использование: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc....
CVE-2025-29306
POC - CVE-2025-29306 FOXCMS /images/index.html コード実行の脆弱性 概要 FoxCMS v.1.2.5 には、index.html コンポーネントのケース表示ページを介して、リモート攻撃者が任意のコードを実行できる問題が存在します。 完全な POC 詳細はこちら — CVE-2025-29306 免責事項 : この Proof of Concept POC...
PYSEC-2026-1840 Pyramid static view path traversal up one directory
Impact This impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of the static view's file system path. No further path traversal exists, and the only file that could be...
PT-2026-36032
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...
CVE-2026-30661
CVE-2026-30661 affects iCMS v8.0.0 in the User Management component (index.html). The vulnerability is a Cross-Site Scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the regip or loginip parameters. The provided documents do not specify exploit details, affec...
CVE-2025-66963
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
PT-2025-51241
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
EUVD-1999-0554
Malware in sbrugna...
EUVD-2018-20901
Malware in sbrugna...
EUVD-2000-0352
Malware in sbrugna...
EUVD-2018-11567
Malware in sbrugna...
EUVD-2019-5482
Malware in sbrugna...
EUVD-2010-3276
Malware in sbrugna...
EUVD-2024-49104
Malicious code in bioql PyPI...
EUVD-2021-31633
Malicious code in bioql PyPI...
EUVD-2025-5544
Malicious code in bioql PyPI...
EUVD-2025-1563
Malicious code in bioql PyPI...
CVE-2024-29193
gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The index page index.html shows the available streams by fetching the API in the client side. Then, it uses Object.entries to iterate over the result whose first item name gets...