dahua-dvr-metasploit

В этом репозитории нет README...

EUVD-2026-90600

Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards...

EUVD-2026-90597

Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards...

CVE-2026-97661

The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-97661 Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field

The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-97661

The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.2.1 . The root cause is insufficient input sanitization and output escaping within the 'gateway' Form Field . An unauthenticated attacker can inject...

EUVD-2026-90574

The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2025-66947

CVE-2025-66947 Time Based Blind SQL Injection в krishanmuraiji SMS v1.0 ⏱️ Визуальное сравнение: нормальный ответ vs задержка 6 секунд 🔍 Краткое описание Кратко: GET-параметр в модуле администратора позволяет выполнить time-based SQL-инъекцию через задержки ответа. В krishanmuraiji SMS v1.0...

nginx-cve-2026-42945-check

Script de vérification local NGINX CVE-2026-42945 Langue : 中文 | English Ce dépôt fournit deux scripts de vérification autonomes pour inspecter localement sur des serveurs Linux/Windows si Nginx, OpenResty, Tengine présentent des risques liés à CVE-2026-42945. Le script effectue uniquement une...

CVE-2026-103543

A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

EUVD-2026-90505

A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

CVE-2026-103543

A SQL injection vulnerability exists in the itsourcecode Leave Management System 1.0 . The flaw is located within an unknown function in the /module/leavetype/controller.php file, where improper handling of the LEAVTID argument allows for remote exploitation. The documents state that the exploit ...

d8-copy-fail-mitigation

Митигация CVE-2026-31431 для Deckhouse Kubernetes Platform Язык: English | Русский Об уязвимости CVE-2026-31431 — уязвимость в модуле ядра Linux algifaead, который предоставляет userspace-доступ к крипто-API ядра через семейство сокетов AFALG. Ошибка в обработке AEAD-интерфейса Authenticated...

CVE-2022-0435-Poc

CVE-2022-0435 stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...

CLEANSTART-2026-TD83938 malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation

Security vulnerability affects the kube-state-metrics-fips package. A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation...

CVE-2026-102667: Exposed Dangerous Method or Function

Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...

CentOS Linux 7 [TuxCare] Security Update: python3 / python3-debug / python3-devel / python3-idle / etc (CENTOS7:CLSA-2025:1759857092)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1759857092 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

CentOS Linux 6 [TuxCare] Security Update: gdb / gdb-gdbserver (CENTOS6:CLSA-2026:1777446434)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777446434 advisory. - GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and...

Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc (crlsa-2024_6726)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20246726 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

AlmaLinux 9.2 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1766598218)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1766598218 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of...