CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: CrushFTP 文件读取漏洞 概述 2024年4月19日，一个影响 CrushFTP 10.7.1 和 11.1.0 以下版本以及旧版 9.x 版本的新零日漏洞被托管文件传输供应商 CrushFTP 披露给一个私人邮件列表。最初，供应商未分配 CVE，但随后第三方 CVE 编号机构（CNA）于 4 月 22 日发布了 CVE-2024-4040。 此利用脚本是为 vsociety 上的 CVE 分析而编写。 影响 据 Rapid7、CrowdStrike 报告，并已被添加到 CISA KEV，CVE-2024-4040 已在野外被积极利用。发现该问题的...

CVE-2024-21626

PoC de CVE-2024-21626 Lee mi artículo completo para una explicación detallada aquí. Artículo relacionado Mientras investigaba CVE-2024–21626 , descubrí una vulnerabilidad pasada por alto en versiones antiguas de Docker y runC. Para obtener más información sobre lo que encontré, lee el siguiente...

bettercap

このリポジトリは廃止されました。bettercapの開発はこちらに移行しており、バージョン2.0.0未満はすべてレガシーとみなされ、サポートされていません。...

NCBI ToolBox - Directory Traversal

NCBI ToolBox 2.0.7 through 2.2.26 legacy versions contain a path traversal vulnerability via viewcgi.cgi which may result in reading of arbitrary files i.e., significant information disclosure or file deletion via the nph-viewgif.cgi query string. id: CVE-2018-16716 info: name: NCBI ToolBox -...

Hitachi Pentaho Business Analytics Server - Bypass Authorization

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. id: CVE-2022-43939 info: name: Hitachi Pentaho Business Analytics Server - Bypass Authorization author: daffainf...

CVE-2026-9277

CVE-2026-9277 - Shell-Quote 命令注入漏洞利用 一个专门用于验证和演示 CVE-2026-9277 的概念验证（PoC）漏洞利用脚本——该漏洞是 shell-quote 库旧版本（= 1.8.3）中存在的一个结构性命令注入漏洞。 该扫描器对输入 JSON 载荷执行深度结构操作，通过递归遍历暴露远程代码执行（RCE）向量，并利用动态网络基线计时引擎防止误报。 主要特性 递归 JSON 遍历： 自动检测并变异多层级嵌套 JSON 结构或类 GraphQL 配置中隐藏的目标数组。 组合变异矩阵： 测试高级数组操作场景，包括特定索引插入、绝对列表覆盖以及分散数组对。 自...

CVE-2026-66058 Frappe: Unrestricted access to a Document Follow API

Frappe is a full-stack web application framework. Prior to 16.20.0 and 15.112.0, unrestricted access to a Document Follow API updatefollow is possible for an authenticated user. This issue is fixed in versions 16.20.0 and 15.112.0...

Inadequate Encryption Strength

Overview Affected versions of this package are vulnerable to Inadequate Encryption Strength in the BcKeyStoreSpi.engineLoad method, which for legacy BKS keystore versions 0 and 1 passes hMac.getMacSize 20 bytes for SHA-1 to generateDerivedMacParameters, where PKCS12ParametersGenerator divides it ...

CVE-2026-12860 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path

In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

DEBIAN-CVE-2026-59650

In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

CVE-2026-9571

Mattermost CVE-2026-9571 affects versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, and 10.11.x

PYSEC-2026-490 Apache Pyfory python is vulnerable to deserialization of untrusted data

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...

DEBIAN-CVE-2026-39938

Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graphtheme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31...

Linux Distros Unpatched Vulnerability : CVE-2026-48990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joser...

CVE-2026-40766 WordPress MasterStudy LMS plugin <= 3.7.25 - SQL Injection vulnerability

Subscriber SQL Injection in MasterStudy LMS = 3.7.25 versions...

Exploit for CVE-2026-9277

CVE-2026-9277 - Shell-Quote Command Injection Expl...

CVE-2026-6736

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

CVE-2026-42539 IRIS has an Excessive Data Exposure issue

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch...

Authlib 安全漏洞

Authlib is an open-source library developed by Authlib, designed to build servers for OAuth and OpenID Connect. Versions of Authlib prior to 1.6.12 and 1.7.1 contained security vulnerabilities. These vulnerabilities stemmed from unauthenticated redirection in the OpenIDImplicitGrant and...