reactshell

Este repositorio nao tem um README...

CVE-2026-78434

Faveo Helpdesk versions up to 2.0.3 contain a missing authentication flaw in the FormController::post_ticket_reply function within app/Http/Controllers/Client/helpdesk/FormController.php, specifically in the post-ticket-reply Endpoint . An unauthenticated remote attacker can exploit this to achie...

CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

PEREDBOEMPATAT-BOF

Questo repository non contiene un README...

DEBIAN-CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

DEBIAN-CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

multicat

Questo repository non contiene un README...

CVE-2025-39247

CVE-2025-39247 الهدف: HikCentral Professional HCMP، خادم VMS مركزي CVE: CVE-2025-39247 — ثغرة في التحكم بالوصول CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N المتأثر: V2.3.1 – V2.6.2 و V3.0.0 المُعالَج: V2.6.3 / V3.0.1 / حزمة الإصلاح CVE-2025-39247 تاريخ الإفصاح: 2025-08-28 تاريخ التحليل:...

Aperisite

Questo repository non contiene un README...

CVE-2026-76816

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null bytes in MQTT UTF-8 string fields and...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::addopaque omits the checknometavarnofvar call that the definition and theorem paths perform, so a value containing a free variable that is absent from the local context is not rejected outright. A...

CVE-2026-72711

CVE-2026-72711 is a kernel soundness flaw in Lean 4 before 4.32.2. The function environment::add_opaque omits the check_no_metavar_no_fvar closure check that the definition and theorem paths perform. A metaprogram can exploit a stale entry in the type checker's inference cache to submit an opaque...

IS

Dieses Repository hat keine README-Datei...

CVE-2025-3102

Questo repository non contiene un README...

Sakai Profile Image Deletion has an IDOR

Summary The Sakai REST API endpoint DELETE /api/users/userId/profile/image does not verify that the requesting user is authorized to modify the target user's profile. Any authenticated user can delete the profile image of any other user, including administrators, by supplying a different userId i...

CVE-2025-53770

Questo repository non contiene un README...

CVE-2025-5815-Nuclei-Template

📄 Template Nuclei per CVE-2025-5815 🚀 Panoramica Questo repository contiene un template Nuclei progettato specificamente per rilevare una vulnerabilità di disabilitazione non autenticata del logging dei bot CVE-2025-5815 nel plugin Traffic Monitor per WordPress. Questo problema consente ad...

CVE-2025-39459-Nuclei-Template

📄 Nuclei-Vorlage für CVE-2025-39459 🚀 Übersicht Dieses Repository enthält eine Nuclei-Vorlage, die speziell entwickelt wurde, um eine nicht authentifizierte Privilegienausweitungsschwachstelle CVE-2025-39459 im Real Estate 7 WordPress Theme zu erkennen. Dieses Problem ermöglicht es nicht...

CVE-2024-7135

CVE-2024-7135 Tainacan = 0.21.7 - प्रमाणित उपयोगकर्ताओं सब्सक्राइबर+ द्वारा आर्बिट्रेरी फ़ाइल रीड के लिए लापता प्राधिकरण विवरण WordPress के लिए Tainacan प्लगइन 0.21.7 तक के सभी संस्करणों में 'getfile' फ़ंक्शन पर क्षमता जाँच की कमी के कारण डेटा के अनधिकृत अभिगम के लिए संवेदनशील है। यह फ़ंक्शन...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Upload Arbitrário de Arquivo Autenticado Assinante+ Descrição O plugin Import Export For WooCommerce para WordPress é vulnerável a uploads arbitrários de arquivos devido à falta de validação de tipo de arquivo em todas as versões até, e...