CVE-2026-73547: Improper Input Validation

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...

Oracle Linux 10 : tomcat (ELSA-2026-69259)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69259 advisory. - Resolves: RHEL-192817 tomcat: HTTP/2 request headers not validated CVE-2026-41293 - Resolves: RHEL-192648 tomcat: Improper Input Validation...

ROS-20260921-73-0081

The vulnerability is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

RHEL 8 : libxml2 (RHSA-2026:69655)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69655 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: mingw-libxml2: libxml2:...

CVE-2026-73513: Improper Input Validation

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without ENDSTREAM. Envoy completes and deferred-deletes the ActiveRequest...

The vulnerability of the setVpnPassCfg function in the microprogramming software of TOTOLINK A3300R allows a hacker to execute arbitrary commands.

The vulnerability of the setVpnPassCfg function in TOTOLINK A3300R router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260921-73-0041

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Exploit for Improper Input Validation in Microsoft

CVE-2023-21554 — QueueJumper PoC Proof of concept for CVE-2...

CVE-2017-9934

CVE-2017-9934 私はこのエクスプロイトの報告者です。名前: Envo Joomla 1.7.3 - 3.7.2 CSRFエクスプロイトPoC この脆弱性は、Joomla 1.7.3 から 3.7.2 が base64 入力をサニタイズしていないために発生します。 Headers: root@kitploit: POST http://localhost/joomla/administrator/index.php?option=commenus&view=item&clientid=0&layout=edit&id=0 HTTP/1.1 User-Agent:...

CVE-2008-6970

説明 PHPのパラメータ入力検証の欠陥を悪用し、指定されたユーザーIDに対して保存されたMD5 SQLハッシュを盲目的にブルートフォース攻撃します。 ファイル root@kitploit: CVE-2008-6970.sh - シェルスクリプトプログラム。 ソース https://github.com/KyomaHooin/CVE-2008-6970...

CVE-2025-34157

Coolify削除フローにおけるStored XSS CVE-2025-34157 影響を受けるバージョン: Coolify ≤ v4.0.0-beta.420.6 修正バージョン: v4.0.0-beta.420.7 深刻度: 重大 9.4 CVSS 4.0 ベクトル: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 クロスサイトスクリプティング, CWE-20 不適切な入力検証 概要 プロジェクト削除フローにおけるStored...

Exploit for Improper Input Validation in Pyyaml

CVE-2020-14343 – PyYAML Unsafe YAML Loading Lab 1. Project...

CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 サニタイズされていない warp:// URIスキームハンドラを介したコマンドインジェクション。詳細な解説は 0day.gg にあります。 概要...

CVE-2022-23131

CVE-2022-23131 urls.txtを作成し、ターゲットをurls.txtに入れてください python CVE-2022-23131.py 脆弱性が存在する場合、bug.txtに出力されます。...

CVE-2026-84106

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-84108

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-81669

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges...

CVE-2026-81623

IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input...

CVE-2026-84108 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation...

CVE-2026-84108

IBM Guardium Data Protection 12.2 is vulnerable to remote code execution caused by improper neutralization of input during web page generation. A remote attacker with no privileges and no user interaction could exploit this via the network, though with high attack complexity. The assigned CVSS 3....