EXPLOIT-CVE-2026-22778

CVE-2026-22778 — vLLM 视频处理中的 RCE 针对 CVE-2026-22778 （CVSS 9.8）的漏洞实验环境与概念验证，该漏洞是 vLLM 多模态摄取路径中的未认证远程代码执行链。 | ---|--- CVE| CVE-2026-22778 公告| GHSA-4r2x-xpjr-7cvv 受影响版本| vLLM = 0.8.3, vLLM 将媒体加载失败转换为 HTTP 400，并将 exc.detail 原封不动地返回给客户端 （apiserver.py）： async def httpexceptionhandler: Request, exc:...

CVE-2026-5782

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows Reflected XSS. This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not...

cve-2025-22457

CVE-2025-22457 模拟：基于栈的缓冲区溢出分析 本项目涉及因嵌入式系统（固件）输入验证缺失（使用 strcpy）而导致的基于栈的缓冲区溢出漏洞的实验室环境模拟、逆向工程分析及利用。 🛠️ 依赖要求 要在本地环境中运行此模拟，必须安装以下工具： Kali Linux（或类似的基于 Debian 的发行版） gcc（编译器） gdb（GNU 调试器 - 用于动态分析） python3（用于漏洞利用脚本） ⚙️ 安装与编译 为了在实验室环境中观察漏洞而不受现代操作系统保护机制（栈金丝雀、NX、PIE）的干扰，编译时需要禁用内存保护。 打开终端，使用以下命令编译源代码： gcc...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 概念実証 CVE-2025-27515 の実践的なデモンストレーション。Laravel Framework（≤ 12.0.0）におけるファイルアップロード検証バイパスの脆弱性です。 脆弱性の概要 CVE-2025-27515 は、Laravel アプリケーションがワイルドカード検証パターン（files.）を使用する際に、攻撃者がファイルアップロード制限を回避できるようにする検証バイパスです。この脆弱性は、Laravel が配列ベースのファイルアップロードを処理する際の弱点を悪用して、悪意のあるファイルのアップロードを可能にします。 重要度: 中/高 CWE:...

PoC-CVE-2025-69421

CVE-2025-69421 仅崩溃复现器 本仓库包含一个最小的畸形 PKCS12 文件，可在隔离的实验室环境中复现 CVE-2025-69421。 生成的 PFX 包含 EncryptedData，其 EncryptedContentInfo 省略了可选的 encryptedContent 字段。易受影响的 OpenSSL 版本可能会将 NULL ASN1OCTETSTRING 指针从 PKCS12unpackp7encdata 传递给 PKCS12itemdecryptd2iex，而后者在未进行 NULL 检查的情况下解引用该指针。...

CVE-2026-102798 WordPress ThemeREX Addons plugin <= 2.46.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group ThemeREX Addons trxaddons allows Stored XSS.This issue affects ThemeREX Addons: from n/a through 2.46.0...

CVE-2020-12641

CVE-2020-12641: 通过Roundcube Webmail中的“imconvertpath”参数进行命令注入 Roundcube 1.4.4、1.3.11和1.2.10之前的版本存在一个命令注入漏洞。 由于"imconvertpath"没有执行清理/输入过滤，能够访问Roundcube安装程序的攻击者可以在此参数中注入系统命令，当任何用户打开包含"非标准"图像的电子邮件时，这些命令将会执行。 供应商披露： 此漏洞的供应商披露和修复可以在此处找到。 要求： 此漏洞需要： 访问Roundcube Webmail安装程序组件 等待Roundcube用户打开包含非标准图像的电子邮件...

DEBIAN-CVE-2026-94646

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

fuzz.txt

fuzz.txt 没有什么比临时更持久 有什么想法吗？...

EUVD-2026-91563

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-94646 Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)

Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes 'prototype pollution' vulnerability in Apache Thrift nodejs bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-94636

The Apache Thrift py bindings are vulnerable to improper handling of highly compressed data (data amplification), function calls with incorrectly specified arguments, and improper validation of specified quantities in input. Specifically, the Python TZlibTransport stops enforcing its decompressed...

EUVD-2026-91560

Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

Allocation of Resources Without Limits or Throttling

Overview org.apache.thrift:libthrift is a lightweight, language-independent software stack with an associated code generation mechanism for point-to-point RPC. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling inadequate restriction of memory...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling inadequate restriction of memory allocation during input processing. An attacker can exhaust system memory by sending specially crafted requests with excessive size values. Remediatio...

CVE-2026-85494

A flaw was found in Apache Thrift. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending specially crafted requests to applications utilizing affected language bindings. Flawed input parameter processing and resource allocation can trigger...

CVE-2026-91777

A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing o...

CVE-2021-35042

CVE-2021-35042: Django SQL注入漏洞 I. 概述 Django是一个用Python编写的开源Web应用框架，基于MVC（模型-视图-控制器）模式构建。最初它是为了管理Lawrence出版集团旗下的新闻内容网站而构建的，是一个内容管理系统（CMS）软件。 Django 3.1.x至3.1.13版本以及3.2.x至3.2.5版本存在SQL注入漏洞。 导致该漏洞的原因是QuerySet.orderby中对用户控制的输入数据的过滤功能不足以防御SQL注入攻击。此漏洞可被利用，允许攻击者执行未经授权的操作，从而导致敏感数据泄露。 CVE - ID| CVE-2021-350...

API-Security-Checklist

English | 简中版 | العربية | Azərbaycan | Български | বাংলা | Català | Čeština | Deutsch | Ελληνικά | Español | فارسی | Français | हिंदी | Indonesia | Italiano | 日本語 | 한국어 | ພາສາລາວ | Македонски | മലയാളം | Монгол | Nederlands | Polski | Português Brasil | Русский | ไทย | Türkçe | Українська | Tiếng...

CVE-2026-97641

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...