CVE-2020-29669

=============== Macally WIFISD2-2A82 CVE-2020-29669 분석 Maximilian BarzSilky와 Daniel Schwendnercode-byter 작성 ========================== 이 문서는 Macally WIFISD2-2A82 여행용 라우터펌웨어 버전: 2.000.010를 공격하는 방법에 대한 분석입니다. 게스트 사용자는 자신의 비밀번호를 재설정할 수 있습니다. 이 과정에는 관리자 계정을 탈취하고 셸 액세스를 얻는 데 사용될 수 있는 취약점이 있습니다. 관리자 사용...

CVE-2026-73975 djehuty: Authenticated SPARQL injection in session editing allows writing arbitrary RDF triples

djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying DELETE/INSERT query by supplying a crafted session name, letting them write and delete arbitrary triples anywhere in t...

PYSEC-2026-4025 AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

Impact Services using internationalized non-ASCII domain names are potentially vulnerable to TLS connections made from AnyIO's connecttcp or directly via TLSStream.wrap where the connection has through other means been hijacked and redirected to a malicious server. The attacker would obtain a...

CVE-2026-59685

Apache HTTP Server (versions 2.4.0 through 2.4.68 ) contains an Out-of-bounds Write vulnerability when deployed on Windows environments. The flaw occurs in the ap_directory_walk() function during Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM while processing paths with 8.3 names that expand bey...

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link Remote Code Execution RCE This repo contains a proof-of-concept PoC exploit for a critical vulnerability affecting D-Link NAS devices. The bug, tracked as CVE-2024-10914 , impacts the following models: D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L The...

CVE-2026-86095

A flaw was found in netcdf-c. An attacker can craft a malicious HDF5 Hierarchical Data Format 5 file with an oversized attribute name. When an application processes this file and attempts to enumerate attribute names, the oversized name can cause an out-of-bounds write, leading to memory corrupti...

CVE-2026-64950

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-7174

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discountwizard/discountconfig during the process of creating discounts assigned to an event. This vulnerability allows JavaScript code to ...

CVE-2026-7175

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;...

CVE-2026-7175

The Entradium platform by Crocantickets is vulnerable to a script injection flaw in the My Profile section. Specifically, the Business Name parameter within the /promoters/edit endpoint fails to properly sanitize input, allowing for the injection of JavaScript code . This malicious script can exe...

EUVD-2026-90745

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;...

CVE-2026-7175 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;...

CVE-2026-7174

The Entradium platform by Crocantickets is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw exists in the Name and Field parameters of the /tools/discount_wizard/discount_config endpoint during the discount creation process. Attackers can inject malicious JavaScript code...

CVE-2026-7174 Multiple vulnerabilities in Entradium by Crocantickets

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discountwizard/discountconfig during the process of creating discounts assigned to an event. This vulnerability allows JavaScript code to ...

BIT-PHP-2026-91767 Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN

phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whose literal characters are together longer than the hostname being verified. A malicious server presenting such a certificate makes the PHP...

BIT-RABBITMQ-2026-67421 RabbitMQ: Stored HTML Injection in RabbitMQ Management OAuth Error Handling

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...

BIT-RABBITMQ-2026-67408 RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

BIT-RABBITMQ-2026-67224 RabbitMQ: Admin path-traversal write via trace name

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...

CVE-2026-64950 Stored Cross-Site Scripting via Directory Name in File Manager Create Directory

Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...

CVE-2026-64950

The Pandora FMS application, from version 777 onwards , is vulnerable to stored Cross-Site Scripting (XSS) due to missing input validation and output encoding on the directory name parameter within the File Manager's Create Directory function. This flaw allows for the execution of malicious scrip...