562283 matches found
EUVD-2026-95026
ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...
CVE-2026-107639 ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...
EUVD-2026-95018
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105831 EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105831
EspoCRM versions before 10.0.6 are vulnerable to an unauthenticated stored HTML injection vulnerability. An attacker can submit crafted data via a Lead Capture public form , which is stored in LeadCaptureLogRecord.data . When an administrator views the log record, the request body is rendered une...
CVE-2026-105831 EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
EUVD-2026-95008
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
CVE-2026-105404
...
CVE-2026-105404
The ImageMagick software is vulnerable to a code injection flaw in its PostScript coders prior to versions 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is the failure to properly sanitize, escape, or trim values written to output files. A remote attacker can supply crafted input values to e...
CVE-2026-105404
Removed by vendor...
poc_cve-2026-42208
CVE-2026-42208 — LiteLLM 사전 인증 SQL 인젝션 LiteLLM에서 정제되지 않은 Bearer 토큰이 원시 PostgreSQL 쿼리에 도달하는 치명적인 사전 인증 SQL 인젝션 취약점인 CVE-2026-42208 을 재현하고 탐지하기 위한 랩 환경입니다. 취약점 개요 필드| 상세 ---|--- CVE ID| CVE-2026-42208 GHSA| GHSA-r75f-5x8p-qvmc CVSS| 9.3 치명적 — AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 영향받는 버전| = 1.81.16, ...
CVE-2024-20931
CVE-2024-20931 CVE-2024-20931용 Poc 취약점 분석 JNDI 주입의 새로운 공격 표면-CVE-2024-20931 분석...
CVE-2024-53900
CTF 챌린지 - Mongoose RCE CVE-2024-53900 챌린지 개요 이 Capture The Flag CTF 챌린지는 Mongoose의 취약점인 CVE-2024-53900을 기반으로 하며, MongoDB 쿼리에서 $where 연산자를 부적절하게 사용하여 원격 코드 실행RCE을 허용합니다. 여러분의 목표는 이 취약점을 악용하여 애플리케이션 내부에 숨겨진 플래그를 검색하는 것입니다! 설정 지침 1 종속성 설치 Node.js가 설치되어 있는지 확인한 후 다음을 실행하세요: npm install 2 MongoDB 구성...
CVE-2021-21110
CVE-2021-21110 CVE-2021-21110 : Tiki Wiki CMS GroupWare 서버사이드 템플릿 인젝션 원격 코드 실행 익스플로잇...
mountain_goat
Привет, я горный козёл и я забодаю ваши TCP-соединения, потому что это довольно козлиное занятие. Это PoC, демонстрирующий методы эксплуатации CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous от авторов Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, Srikanth V...
CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection
README.md CVE-2025-60787 Обнаружение: RCE в motionEye через внедрение конфигурации Неаутентифицированное удаленное выполнение кода в motionEye Неподвижные изображения - Имя файла изображения Пример PoC-полезной нагрузки: $touch /tmp/test.%Y-%m-%d-%H-%M-%S Когда motion перезапускается, команда...
CVE-2022-0739
CVE-2022-0739 BookingPress워드프레스 플러그인 SQL 인젝션 BookingPress 1.0.11 이전...
CVE-2022-0944
CVE-2022-0944 SQLPad - 템플릿 주입 이는 블라인드 취약점으로, 출력이 응답에 직접 반환됨을 의미합니다. 익스플로잇 다음 명령으로 스크립트를 사용하세요: python3 exploit.py --url http://localhost:13000 --command 'ls -la /tmp/test' --username admin --password password 출력 Login was successfull Exploited! 테스트 환경 Docker 사용: Docker 컨테이너 시작 - sudo docker run -...