87342 matches found
CVE-2024-53677
Questo repository non contiene un README...
CVE-2026-76073
Label Studio (through 1.23.0 ) has a broken access control flaw in its annotation detail endpoint. The AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() without a get_queryset override, so any annotation is retrievable by primary key. Because permissions are ...
CVE-2025-1307
Exploit Newscrunch CVE-2025-1307 🚨 Panoramica Questo exploit prende di mira una vulnerabilità critica CVE-2025-1307 nel tema WordPress Newscrunch. La falla permette a utenti autenticati di livello Abbonato e superiore di caricare file arbitrari a causa della mancanza di controlli di capacità nell...
CVE-2025-65754
CVE-2025-65754 : Gespeichertes XSS in Algernon 1.17.4 Beschreibung Algernon v1.17.4 ist von einer Cross-Site-Scripting XSS-Sicherheitslücke betroffen, die es Angreifern ermöglicht, über eine manipulierte Nutzlast in einem Dateinamen beliebigen Code auszuführen. Betroffenes Projekt : Algernon -...
CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl
CVE-2026-56423 — MISP deleteSelection Fehlerhafte Zugriffskontrolle Proof of Concept für eine fehlende Autorisierungsschwachstelle in MISPs Massenlöschungsvorgängen für Event Reports und Sharing Groups. Die deleteSelection-Handler autorisieren jedes ausgewählte Element mit einem Callback, der das...
CVE-2026-5865
Dieses Repository hat keine README-Datei...
CVE-2026-3910
Dieses Repository hat keine README-Datei...
CVE-2025-5304
CVE-2025-5304 PT Project Notebooks 1.0.0 - 1.1.3 - Autorizzazione mancante per l'escalation di privilegi non autenticata 🚀 PT Project Notebooks ≤ 1.1.3 — Escalation di privilegi non autenticata CVE-2025-5304 PoC e helper per l'exploit per PT Project Notebooks versioni 1.0.0–1.1.3 : la mancata...
CVE-2026-15718-who-put-ptrs-in-my-wasm
CVE-2026-15718 — quem colocou ponteiros no meu wasm Cadeia de exploits de prova de conceito para CVE-2026-15718 , uma má compilação por falta de sync no compilador baseline do WebAssembly do SpiderMonkey da Mozilla componente "JavaScript: WebAssembly". Um único array.fill de zero iterações gera u...
CVE-2016-10033
Questo repository non contiene un README...
CVE-2026-71933 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...
CVE-2026-71934 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...
CVE-2026-71933
DrayTek VigorSwitch (multiple models) is affected by unauthorized operation vulnerabilities in its syslog functions , caused by missing authorization checks . A remote unauthenticated attacker can send crafted requests to modify configuration , restart services , save startup configuration , or c...
EUVD-2026-64992
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...
CVE-2026-71922 DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi
Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the setget.cgi interface. The vulnerability is caused by missing validation when the pass field is absent. A remote attacker can trigger this vulnerability via a crafted request to crash the...
CVE-2026-71911 DrayTek VigorAP Multiple Models Buffer Overflow via setLan
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...
EUVD-2026-64970
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...
CVE-2026-71911
Multiple DrayTek VigorAP models are affected by a buffer overflow in the setLan function, caused by missing length checks during memory copy operations on the lanVlanId0 , lanIp , and lanNetmask fields. A remote attacker with valid administrative credentials on the device's web management interfa...