Lucene search
+L

51 matches found

Kitploit
Kitploit
added 2026/09/15 10:04 a.m.8 views

CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...

10CVSS7.9AI score0.71641EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 4:48 a.m.7 views

SharpPrivesc

SharpPrivesc Practicing C and bringing Privesc attack surfaces together. Still noob stuff. Privesc checks and the like. I preferred Spectreops command line parsing classes so decided to utilize theirs over other .net packages like command line parser etc. To-Do: Menu More Privesc Check modules...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 7:45 p.m.10 views

CVE-2023-2825-Gitlab

CVE-2023-2825 El 23 de mayo de 2023 GitLab lanzó la versión 16.0.1 que corrigió una vulnerabilidad crítica, CVE-2023-2825, que afecta a la Community Edition CE y Enterprise Edition EE versión 16.0.0. La vulnerabilidad permite a usuarios no autenticados leer archivos arbitrarios a través de un fal...

10CVSS7.9AI score0.71641EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 6:34 p.m.6 views

CVE-2023-2825

CVE-2023-2825 No autenticado El recorrido de directorios conduce a la lectura de archivos. Resumen del CVE Se ha descubierto un problema en GitLab CE/EE que afecta solo a la versión 16.0.0. Un usuario malintencionado no autenticado puede utilizar una vulnerabilidad de recorrido de rutas para leer...

10CVSS7.8AI score0.71641EPSS
SaveExploits5References2
Kitploit
Kitploit
added 2026/09/09 11:43 a.m.6 views

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated user...

10CVSS7.9AI score0.71641EPSS
SaveExploits5
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.5 views

Astra Linux – Vulnerability in protobuf

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups/series of SGROUP tags can be corrupted due to exceeding the stack limit, i.e., StackOverflow. Parsing nested groups as unknown fields using the DiscardUnknownFieldsParser or the Java Protobuf...

8.7CVSS6.9AI score0.02772EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2026/03/18 1:19 p.m.23 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.8AI score0.02772EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/01 8:44 p.m.12 views

GHSA-RCMH-QJQH-P98V Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. Details According to RFC 5322, nested group structures a group inside another group are not allowed. Therefore, in lib/addressparser/index.js, the email address parser performs flattening when nested...

7.5CVSS6.2AI score0.0048EPSS
SaveExploits1References7
Snyk
Snyk
added 2025/12/01 8:44 p.m.5 views

Uncontrolled Recursion

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Uncontrolled Recursion in the addressparser function. An attacker can cause the process to terminate immediately by sending an email address...

8.2CVSS6.5AI score0.0048EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2025/12/01 8:44 p.m.26 views

Nodemailer’s addressparser is vulnerable to DoS caused by recursive calls

Summary A DoS can occur that immediately halts the system due to the use of an unsafe function. Details According to RFC 5322, nested group structures a group inside another group are not allowed. Therefore, in lib/addressparser/index.js, the email address parser performs flattening when nested...

7.5CVSS7.1AI score0.0048EPSS
SaveExploits1References7Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:00 a.m.6 views

TencentOS Server 4: protobuf (TSSA-2024:0556)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0556 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

8.7CVSS7.3AI score0.02772EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2024-54086

Malicious code in bioql PyPI...

5.8CVSS6.3AI score0.00434EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/09/12 1:20 p.m.10 views

CVE-2025-10224

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

7.1CVSS6.9AI score0.00323EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 1:15 p.m.15 views

CVE-2025-10224

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

7.1CVSS0.00323EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 1:15 p.m.11 views

CVE-2025-10224

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

7.1CVSS5.8AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/10 12:36 p.m.33 views

CVE-2025-10224

The CVE-2025-10224 entry concerns AxxonSoft Axxon One (C-Werk) prior to or equal to 2.0.2 on Windows, where the LDAP authentication engine improperly evaluates nested LDAP group memberships. This allows a remote authenticated user to be denied access or receive misassigned roles during login. The...

7.1CVSS6.5AI score0.00323EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/10 12:36 p.m.7 views

CVE-2025-10224 Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

5.4CVSS6.5AI score0.00323EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/10 12:36 p.m.20 views

CVE-2025-10224 Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)

Improper Authentication CWE-287 in the LDAP authentication engine in AxxonSoft Axxon One C-Werk 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group memberships during login...

5.4CVSS0.00323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.19 views

PT-2025-37043

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One versions 2.0.2 and earlier Description: The LDAP authentication engine in AxxonSoft Axxon One has an improper authentication issue. A remote authenticated user may be denied access or misassigned roles due to incorrect...

5.4CVSS6.5AI score0.00323EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-7254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the...

8.7CVSS7AI score0.02772EPSS
SaveExploits1References2
Rows per page
Query Builder