6645 matches found
-CVE-2024-45352
🚨 CVE-2024-45352 – Esecuzione di codice remoto RCE in Xiaomi Smarthome 📌 Sommario Una vulnerabilità critica CVE-2024-45352 è stata scoperta nell'applicazione Xiaomi Smarthome, che consente l'esecuzione di codice remoto RCE non autenticata tramite una gestione impropria dell'input nel parser API...
Alfred
WIP - Revamped Alfred 2.0 Alfred - A Modular Recon and Exploitation Framework EXPIREMTNAL PHASE Alfred è un framework basato su Python progettato per assistere in varie attività di ricognizione, exploitation e post-exploitation. È altamente modulare e consente agli utenti di aggiungere facilmente...
CVE-2024-23113
CVE-2024-23113 Lo script è progettato per rilevare CVE-2024-23113, una vulnerabilità di formato stringa nel servizio FGFM di FortiGate protocollo FortiGate-to-FortiManager in esecuzione sulla porta TCP 541. La vulnerabilità si verifica perché un attaccante può controllare una stringa di formato, ...
NextJS-CVE-2025-29927
🔓 NextJS-CVE-2025-29927 - संवेदनशील प्रदर्शन अनुप्रयोग यह एक संवेदनशील Next.js अनुप्रयोग है जो CVE-2025-29927 को प्रदर्शित करता है, जो कि Next.js का उपयोग करने वाले वेब अनुप्रयोगों में अनुचित इनपुट हैंडलिंग या एक्सेस नियंत्रण दोषों के कारण पहचाना गया एक सुरक्षा दोष है। यह परियोजना MySQL बैकएंड और...
CVE-2026-15917
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS. This issue affects Drupal core versions: from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.2...
CVE-2026-79248
Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
MINI-GPFQ-6JX6-7R2W
Bulletin has no description...
EUVD-2026-60921
Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...
MINI-HW6M-4HC7-X26C
Bulletin has no description...
MINI-2GX4-QH6Q-QVHW
Bulletin has no description...
MINI-GMQ6-38QC-Q398
Bulletin has no description...
MINI-XPMC-3HPF-VG8Q
Bulletin has no description...
MINI-GJ94-V974-XG2H
Bulletin has no description...
MINI-R752-4RP6-V4C4
Bulletin has no description...
SUSE CVE-2026-14668
Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...
MINI-G5V7-CVHQ-RJGG
Bulletin has no description...
Denial Of Service (DoS)
Micrometer is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specially crafted HTTP requests, which allows an attacker to send malicious requests that consume excessive resources and cause the affected application to become unavailable...
GO-2025-3467 vulnerabilities
Vulnerabilities for packages: gh...