Exploit for CVE-2025-1094

CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repo...

CVE-2022-49429 RDMA/hfi1: Prevent panic when SDMA is disabled

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1CAPSDMA off, a call to hfi1writeiter will dereference a NULL pointer and panic. A typical stack frame is: sdmaselectuserengine hfi1...

PT-2025-6197 · Siemens · Siprotec 5

Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 6MD84 CP300 versions prior to V9.90 SIPROTEC 5 6MD85 CP300 versions 8.80 through 9.89 SIPROTEC 5 6MD86 CP300 versions 8.80 through 9.89 SIPROTEC 5 6MD89 CP300 versions 8.80 through 9.89 SIPROTEC 5 6MU85 CP300 versions 8.80 through...

CVE-2024-45290

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image size and type by reading the file contents, if the provided...

Asseco Business Solutions Wapro ERP 安全漏洞

Asseco Business Solutions Wapro ERP is an enterprise-oriented ERP software from Asseco Business Solutions, Poland. A security vulnerability exists in Asseco Business Solutions Wapro ERP versions prior to 8.90.0, which stems from a hard-coded password for the database administrator account created...

whistle 安全漏洞

whistle is a Node-based implementation of a cross-platform packet-catching debugging tool for individual developers at avenwu. A security vulnerability exists in whistle v.2.9.90 and earlier versions. An attacker can exploit this vulnerability to execute malicious API calls to execute arbitrary...

PT-2024-36532 · Unknown · Avenwu Whistle

Name of the Vulnerable Software and Affected Versions: Avenwu Whistle versions 2.9.90 and earlier Description: The issue allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine. This is due to a Cross-Site Request Forgery CSRF flaw...

CVE-2024-51115

DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability...

The vulnerability in the web interface for managing microprogrammed software devices of Cisco Analog Telephone Adapter (ATA) series 190 allows a perpetrator to execute commands on behalf of the Admin user.

The vulnerability of the web interface for managing microprogrammed software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute commands on behalf of the Admin user by sending a...

The vulnerability in the web interface of the microprogramming software for Cisco Analog Telephone Adapter (ATA) model 190 allows a perpetrator to make limited changes to the configuration or restart the device.

The vulnerability of the web interface for managing microprogrammed software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to the bypassing of authentication due to a root cause. Exploiting this vulnerability allows an attacker to make limited changes to the...

PT-2024-29378 · Organizr · Organizr

Name of the Vulnerable Software and Affected Versions: Organizr version 1.90 Description: The issue is a SQL injection problem. It occurs via the chat/setlike.php file. Recommendations: For Organizr version 1.90, consider restricting access to the chat/setlike.php file until a patch is available...

Organizr 安全漏洞

Organizr is a tab management system for causefx individual developers. It is intended to be a one-stop store on the front end of the server. A security vulnerability exists in Organizr v1.90, which stems from a SQL injection vulnerability via chat/settyping.php...

Raisecom MSG1200、Raisecom MSG2100E、Raisecom MSG2200和Raisecom MSG2300 安全漏洞

The Raisecom MSG1200 and others are a Gigabit converged gateway from Raisecom China. A security vulnerability exists in the Raisecom MSG1200, Raisecom MSG2100E, Raisecom MSG2200, and Raisecom MSG2300 version 3.90, which originates from the parameter template/stylenum in the file...

PT-2024-19805 · Unknown · Controller 6000 +1

Name of the Vulnerable Software and Affected Versions: Controller 6000 and Controller 7000 versions 8.60 and prior Controller 6000 and Controller 7000 versions 8.70 prior to vCR8.70.240520a Controller 6000 and Controller 7000 versions 8.80 prior to vCR8.80.240520a Controller 6000 and Controller...

CVE-2024-39019

creationtimestamp| type| source ---|---|--- 2024-07-05 22:07:04+00:00| seen| https://t.me/cvedetector/134...

PT-2024-18818 · WordPress · Vk All In One Expansion Unit

Name of the Vulnerable Software and Affected Versions: VK All in One Expansion Unit plugin for WordPress versions up to, and including, 9.95.0.1 Description: The issue allows unauthenticated attackers to view limited password-protected content due to Sensitive Information Exposure via social meta...

CVE-2019-19999

creationtimestamp| type| source ---|---|--- 2024-03-17 08:41:19+00:00| seen| https://t.me/ctinow/209802...

CLSA-2024-1709840060 Update of nss

Update to CKBI 2.64 from NSS 3.95 - Removed: - Certificate "E-Tugra Certification Authority" - Certificate "Hongkong Post Root CA 1" - Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - Certificate "Symantec Class 2 Public Primary Certification Authority - G6" -...

Gallagher Command Centre Cross-Site Scripting Vulnerability

Gallagher Command Centre is a centralized control tool for Gallagher access control systems from Gallagher New Zealand. A security vulnerability exists in Gallagher Command Centre due to improper neutralization of special elements. The following products and versions are affected: Gallagher Comma...

CVE-2024-0251

The Advanced Woo Search plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search parameter in all versions up to, and including, 2.96 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...