CVE-2026-13746

Improper neutralization of local CLI parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. A user could trigger this issue by supplying crafted values to vulnerable Cortex SQL or object listing command paths, causing Snowflake CLI to execute unintended SQL in the...

ColdFusion probe.cfm Cross Site Scripting

Describe£ºColdFusion probe.cfm page local parameter can xss CVE£ºUnknow PoC£º http://127.0.0.1/CFIDE/probe.cfm?name=alert"G.R0b1n" URL.Name parameter can xss only local. Or visit: http://www.focusecurity.org/2011/08/ColdFusion-Local-Parameter-Xss-Exploit.html...