202882 matches found
CVE-2017-16082
CVE-2017-16082 Descripción general Las versiones afectadas de pg contienen una vulnerabilidad de ejecución remota de código que ocurre cuando la base de datos remota o la consulta especifica un nombre de columna manipulado. Existen dos escenarios específicos en los que es probable que una...
atlas-tj-actions-poc
CVE-2025-54416: tj-actions/branch-names 命令注入 PoC 该仓库演示了 CVE-2025-54416 ，这是 tj-actions/branch-names 中的一个严重命令注入漏洞，影响超过 5000 个公共仓库。 漏洞 tj-actions/branch-names GitHub Action（版本 "$GITHUBOUTPUT" 攻击链 1. 攻击者创建一个包含恶意命令的分支名称 2. 受害者工作流使用 tj-actions/[email protected] 提取分支名称 3. 提取的分支名称（含攻击者载荷）被用于后续的 shel...
SharpWnfSuite
SharpWnfSuite Este es el repositorio de herramientas para Windows Notification Facility WNF. Actualmente, se ha subido una adaptación en C de las herramientas de wnfun desarrolladas por Alex Ionescu @aionescu y Gabrielle Viala @pwissenlit. Cuando desarrolle herramientas adicionales para Windows...
gimphash
gimphash gimphash es un método propuesto para calcular un equivalente de imphash para binarios de Go. Su nombre proviene de G o-imp ort-hash. Los binarios de Golang contienen sus dependencias como parte del ejecutable. Estas dependencias incluyen tanto paquetes de la biblioteca estándar como...
CVE-2020-9484
Exploit de ejecución remota de código en Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 es vulnerable a la ejecución remota de código con el CVE-ID CVE-2020-9484. Otras versiones también pueden verse afectadas. Probado en Kali 2020.4 y JDK 8. Este script bash es una prueba de concepto sencilla. Solo c...
cve-2024-36401-geoserver-rce
CVE-2024-36401 — RCE no autenticada en GeoServer Un estudio completo y reproducible de la vulnerabilidad CVE-2024-36401 , un fallo de ejecución remota de código no autenticado en GeoServer — el servidor de código abierto más utilizado para datos geoespaciales. El error es una inyección de eval : ...
dorky
Dorky Dorky es una herramienta de línea de comandos que busca coincidencias en nombres de organizaciones, nombres de repositorios y nombres de usuario en GitHub y GitLab a partir de una lista de palabras de entrada. Esta herramienta puede ser útil para identificar posibles objetivos en evaluacion...
DEBIAN-CVE-2026-89746
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...
CVE-2026-89256
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
EUVD-2026-76068
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
CVE-2026-89256 AVideo Bookmark Plugin Stored XSS via Chapter Names
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
CVE-2026-89256
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is affected by a stored cross-site scripting (XSS) vulnerability in its Bookmark plugin . The root cause is that chapter names are not HTML-encoded before being concatenated into public watch-page markup. A video owner can inject a ma...
CVE-2026-88046
A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows an attacker to bypass configured directory restrictions by including parent-directory segments e.g., '..' in source object names. When a specially crafted source object is uploaded or copied, it can...
CVE-2026-76060_ZoneMinder_CommandInjection-PoC
just wait and see Prueba de concepto de una vulnerabilidad de inyección de comandos del sistema operativo en la funcionalidad de exportación de eventos de ZoneMinder web/includes/downloadfunctions.php. Los nombres de los monitores se interpolan directamente en los comandos de shell utilizando un...
EUVD-2026-75771
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
PT-2026-89679
Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies. Attackers with write access to the plugins directory can create a plugin with HTML characters in its name to execute arbitrary scripts...
PT-2026-89859
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video owner can inject malicious scripts via the bookmark name...
GHSA-66HP-WGXQ-6F5Q rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...
rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...