opencast-CVE-2021-43821-env

opencast-CVE-2021-43821-env Среда уязвимости утечки конфиденциальной информации opencast cve-2021-43821 Статья с воспроизведением: https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Потенциально позволяет злоумышленнику читать определенную информацию на шлюзах безопасности Check Point после подключения к интернету и включения удаленного доступа VPN или Mobile Access Software Blades. Доступно исправление безопасности, смягчающее эту уязвимость. ПЕРВОЕ: Я НЕ НЕС...

CVE-2020-13158

CVE-2020-13158 - Artica Proxy 4.30.000000 Community Edition 以前のバージョンではディレクトリトラバーサルが可能 製品説明: Artica Tech は、通常は大企業や多国籍企業が利用する強力でありながらシンプルなソリューションを提供します。わずか99ユーロからの開始価格と62,000以上のアクティブサーバーを擁する Artica Proxy は、過去10年にわたってオープンソースプロジェクトとして開発され、中小企業や公共機関が低コストで組織と従業員をインターネットの危険から保護できるよう支援してきました。 説明: Artica...

CVE-2020-4463

IBM Maximo Asset Management уязвим к раскрытию информации через XXE-уязвимость CVE-2020-4463 IBM Maximo Asset Management уязвим к атаке с внедрением внешних XML-сущностей XXE при обработке XML-данных. Удаленный злоумышленник может использовать эту уязвимость для раскрытия конфиденциальной...

CVE-2023-49496_PoC

CVE-2023-49496PoC Description UCServer est un serveur de communications unifiées avancé. La société Shanghai Shupin Information Technology Co., Ltd. présente une vulnérabilité d'injection SQL dans son UCServer, qu'un attaquant peut exploiter pour obtenir des informations sensibles de la base de...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Fuite d'informations Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...

EUVD-2026-95021

Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in getdataset and getnextdatum that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted,...

CVE-2026-107634

Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in getdataset and getnextdatum that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or mounted,...

EUVD-2026-95015

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...

CVE-2026-105828

Parse Server versions 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 are vulnerable to an information disclosure vulnerability via GraphQL errors. Even when public introspection is disabled, unauthenticated attackers possessing a public Application Id can send crafted operations to trigger ...

CVE-2026-105828 Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...

CVE-2026-105828 Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send...

CVE-2026-105823

The ImageMagick library is vulnerable in versions before 6.9.13-56 and 7.x before 7.1.2-31 due to a missing security-policy check in the CUT encoder . An attacker can supply specially crafted input to bypass configured security policies, which may result in the disclosure of sensitive information...

CVE-2024-24919

CVE-2024-24919 Checkpoint Firewall VPN에서 CVE-2024-24919 취약점을 검증하는 익스플로잇 도구 이 도구는 "Target-IP.txt" 파일이 포함된 출력 폴더를 생성합니다. 이 파일에는 영향을 받은 대상의 /etc/passwd 파일 내용이 포함되어 있으며, 이를 통해 시스템이 취약한지 여부를 확인할 수 있습니다. 이 도구를 실행하려면 Python 3만 있으면 됩니다. 도구를 실행하려면 다음 명령어를 사용하세요: python3 CVE-2024-24919.py -i Target-IP 취약점에...

CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit

CVE-2025-12139: Integrate Google Drive 워드프레스 플러그인 - 정보 노출 익스플로잇 설명 이것은 CVE-2025-12139 에 대한 Golang 개념 증명PoC 익스플로잇입니다. 이 취약점은 워드프레스용 Integrate Google Drive 플러그인버전 = 1.5.3에 존재합니다. 인증되지 않은 공격자가 Google 클라이언트 ID, 클라이언트 시크릿 및 OAuth 액세스 토큰 을 포함한 민감한 정보를 검색할 수 있어 잠재적으로 전체 Google Drive 계정 탈취로 이어질 수 있습니다. 취...

CVE-2022-44268

CVE-2022-44268 ImageMagick 7.1.0-49 подвержен раскрытию информации Использование exploit.sh sh exploit.sh Выходное изображение сохраняется в output.png getdata.sh sh getdata.sh Источник https://www.metabaseq.com/threat/imagemagick-zero-days/...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

CVE-2026-14273

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an incorrect authorization flaw (CWE-863). This issue could allow a local attacker to obtain sensitive information . No specific root cause...

CVE-2026-14273 IBM DataPower Gateway Incorrect Authorization

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...

EUVD-2026-94999

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive information due to improper authorization...