CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- msgkit डाउनलोड करें 2- appointment वर्ग को संपादित करें और नीचे जोड़ें: 3- प्रोजेक्ट के अंदर एक नया वर्ग बनाएं ताकि msg फ़ाइल के गुण सेट किए जा सकें: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...

CVE-2022-46104---POC

CVE-2022-46104 https://www.sourcecodester.com/ Human Resource Management System 프로젝트의 loginn.php 페이지에서 XSS가 발견되었습니다: 실행 페이로드: http://localhost/hrm/loginn.php?msg=%3Cscript%3Ealert%27XSS%27%3C/script%3E...

CVE-2023-23397_EXPLOIT_0DAY

CVE-2023-23397EXPLOIT0DAY Exploit pour la CVE-2023-23397 Crédit à domchell Vérificateur EML/MSG pour l'exploit : root@kitploit: !/usr/bin/env python3 from extractmsg import AppointmentMeeting from ..helpers import Status from ..task import Task from ..report import Report from .base import...

CVE-2025-69606-GSVoIP-XSS

CVE-2025-69606 — XSS Refletido no Painel Web GSVoIP Severidade: Média | CWE: CWE-79 | Autenticação Necessária: Não | Vetor: Remoto Resumo Uma vulnerabilidade de Cross-Site Scripting XSS Refletido foi identificada no Painel Web GSVoIP v2.0.90. O parâmetro msg do endpoint de erro não sanitiza a...

CVE-2023-45158

CVE-2023-45158 Passos 1. Execute o servidor web root@kitploit: cd web2py python3 web2py.py 2. Injete seu comando usando a URL http://:8000/hack?msg=%27%3B%3B%27. Substitua e pelos seus valores. Exemplos 1. Crie um arquivo no servidor http://:8000/hack?msg=%27%3Btouch%20hack%3B%27 2. Shell reverso...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - Vulnerabilità di HTML injection nel sistema di prenotazione e prenotazione di eventi online versione 2.3.0. Descrizione tecnica: Esiste una vulnerabilità di HTML injection nel sistema di prenotazione e prenotazione di eventi online versione 2.3.0. Un attaccante può...

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Vulnerabilità-di-Cross-Site-Scripting-Riflesso Autore dell'exploit: ersinerenler Homepage del fornitore https://code-projects.org/blood-bank-in-php-with-source-code Link del software...

proofpoint-CVE-2023-0089

Über Sicherheitsforscher: ly1g3, ly1g3attuta.io GPG-Fingerabdruck: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Überblick: Remote Code Execution – Von einem niedrig privilegierten authentifizierten Benutzer zu Admin-RCE CVE: CVE-2023-0089 Zeitleiste:...

PT-2026-79615

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk msg ring unpushed When the copy path in tls sw sendmsg locked adds the fragment that fills the plaintext sk msg ring, it does not set full record, so the record is left full and unpushed. A...

PT-2026-72868

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of released call in recvmsgMSG PEEK Fix rxrpc recvmsg to also drop the ref it holds on an already-released call if MSG PEEK is in force the function holds a ref on the call irrespective of whether MSG PEEK is...

CVE-2026-68278

In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix buffer overflows in sideband chunk accumulation drmdpsidebandappendpayload has three related bugs when processing device-provided sideband reply data: 1. Zero-length curchunklen underflow: msglen is a 6-bit field...

CVE-2024-14041

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

UBUNTU-CVE-2024-14041

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

EUVD-2024-55702

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

CVE-2026-53361

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

CVE-2026-13733

The CVE-2026-13733 entry affects the WordPress Download Manager plugin (versions up to 3.3.60). A Stored Cross-Site Scripting flaw exists in the no_data_msg shortcode attribute due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level a...

CVE-2026-13733

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nodatamsg' Shortcode Attribute in all versions up to, and including, 3.3.60 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

A Path Traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitrary files on the filesystem when processing malicious MSG files with attachments. Impact An attacker can craft a malicious .msg file with attachment filenames containing path traversal...

PYSEC-2026-558 Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

A Path Traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitrary files on the filesystem when processing malicious MSG files with attachments. Impact An attacker can craft a malicious .msg file with attachment filenames containing path traversal...

Linux Distros Unpatched Vulnerability : CVE-2026-52989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: propagate nvmettcpbuildpduiovec errors to its callers Currently, when nvmettcpbuildpduiovec detects an out-of-bounds PDU length or offset, it trigger...