CVE-2025-31980 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...

CVE-2025-54123

CVE-2025-54123 - Hoverfly Command Injection RCE PoC CVE-2025-54123 - Middleware Command Injection in Hoverfly 📌 CVE Details ID : CVE-2025-54123 Type : Command Injection / Remote Code Execution RCE Vendor : Hoverfly Impact : Allows authenticated attackers to execute arbitrary system commands via t...

CVE-2025-20393

CVE-2025-20393 📌 Overview CVE-2025-20393 is a critical Remote Command Execution RCE vulnerability affecting Cisco Secure Email Gateway SEG and Cisco Secure Email and Web Manager SEWM appliances running Cisco AsyncOS. The vulnerability exists due to improper input validation in the Spam Quarantine...

exploit_cve-2007-2447_again

exploitcve-2007-2447again just remeber how small mistake in santisize username could give yoy root access to the full machine...

CVE-2014-9219

CVE-2014-9219 CVE-2014-9219 XSS POC About The vulnerability is caused by an input validation error in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 when processing url parameter. A remote attacker can trick the victim to follow a specially crafted link and execute arbitra...

CVE-2025-60012-POC

For educational and security research purposes only. Do not use against systems you do not own or have explicit written permission to test. →Full Disclaimer CVE-2025-60012 — Apache Livy Unauthorized File Access -yellow Overview Field| Detail ---|--- CVE ID| CVE-2025-60012 Severity| Medium CVSS 6....

CVE-2020-10128

CVE-2020-10128 - SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total cost of...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 is a critical remote code execution vulnerability in Microsoft Outlook versions including Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 before February 2024 patch. It allows an unauthenticated attacker to bypass Outlook’s Protected View by sending a specially crafted emai...

CVE-2019-12453

CVE-2019-12453 CVE-2019-12453 Stored XSS in MicroStrategy Web prior to 10.1 patch 10 Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 In MicroStrategy Web prior to version 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation. The FLTB...

CVE-2019-19781

This article is about CVE-2019-19781, a Remote Code Execution RCE vulnerability due to Directory Traversal in Citrix ADC and Gateway. This remote code execution vulnerability occurs because the validation of the smb.conf file under the /vpn path's ../vpns is not properly performed. Steals system...

CVE-2025-49132-Pterodactyl-Panel-RCE

CVE-2025-49132 — Pterodactyl Panel Security Research & Educational Analysis Overview This project documents research related to CVE-2025-49132 , a vulnerability affecting the Pterodactyl Panel. Purpose: Security research, education, defensive awareness Use only in controlled environments Does not...

CVE-2019-6690-python-gnupg-vulnerability

CVE-2019-6690: Improper Input Validation in python-gnupg 0.4.3 We discovered a way to inject data trough the passphrase property of the gnupg.GPG.encrypt and gnupg.GPG.decrypt methods when symmetric encryption is used. The supplied passphrase is not validated for newlines, and the library passes...

CVE-2021-36260-hikvision

CVE-2021-36260 CVE-2021-36260 POC command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Exploit Title:...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - ASUS RT-AC87U TFTP is vulnerable to Denial of ServiceDoS attack 1. NAME OF AFFECTED PRODUCTS AND VERSIONS ASUS RT-AC87U 3.0.0.4.38251640 2. PROBLEM TYPE Its primarily related to CWE-20, TFTP service running in ASUS...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

CVE-2026-103289

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

CVE-2026-103278

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through...

EUVD-2026-90682

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data...

EUVD-2026-90671

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through...

CVE-2026-103278

Ghost versions 5.8.0 before 6.34.0 are susceptible to a staff account takeover due to an input validation vulnerability within the admin iframe . Attackers possessing content publishing privileges can craft malicious pages that trigger this vulnerability when visited by active staff users. While ...