3059658 matches found
CVE-2026-34975
CVE-2026-34975 — Injeção de Cabeçalho de Email CRLF no Plunk via construção de MIME bruto Severidade : Alta CVSS 8.5 CWE : CWE-93 — Neutralização Incorreta de Sequências CRLF 'Injeção de CRLF' Afetado : useplunk/plunk todas as versões anteriores à correção Advisory : GHSA NVD :...
CVE-2026-34940
CVE-2026-34940 — OS-Befehlsinjektion in KubeAI über Modell-URL im Ollama-Startup-Probe Schweregrad : Hoch CVSS 8.7 CWE : CWE-78 — Unzureichende Neutralisierung spezieller Elemente, die in einem OS-Befehl verwendet werden Betroffen : github.com/kubeai-project/kubeai = Commit ba1824e Advisory : GHS...
CVE-2026-1357-Lab
CVE-2026-1357 — WPvivid Backup & Migration Verwundbare vs. gepatchte Docker-Lab-Umgebung Nur-lokal Docker-Lab zum Vergleich von WPvivid Backup & Migration: Verwundbar: 0.9.123 Gepatcht: 0.9.124 Erstellt für Lernzwecke Lab-Einrichtung, Verifizierung, Protokolle, Notizen. Alles, was mit PoC zu tun...
CVE-2026-6471
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server. Mitigation To mitigate this...
CVE-2026-34160
CVE-2026-34160 — Nicht authentifizierte SSRF in Chamilo LMS über das PENS-Plugin pens.php Schweregrad : Hoch CVSS 7.5 CWE : CWE-918 Server-Side Request Forgery Betroffen : chamilo/chamilo-lms 2.x Commit af6b7002 und früher Advisory : GHSA-g2xj-4cch-j276 NVD :...
CVE-2024-57521-SQL-Injection-PoC
Authentifizierte SQL-Injection in RuoYi v4.7.9 Umgehung von CVE-2024-42900 Einleitung Ich habe eine Blind-SQL-Injection-Schwachstelle in der createTable-Funktion des RuoYi Framework v4.7.9 entdeckt. Diese ermöglicht es einem authentifizierten Administrator, beliebige SQL-Befehle über den Paramete...
CVE-2026-33980
CVE-2026-33980 — KQL-Injection in adx-mcp-server über den Parameter tablename Schweregrad : Hoch CVSS 8.8 CWE : CWE-943 — Unzureichende Neutralisierung spezieller Elemente in der Datenabfragelogik Betroffen : adx-mcp-server = 0.1.0 Commit 48b2933 Advisory : GHSA NVD :...
CVE-2026-33715
CVE-2026-33715 — SSRF não autenticado + Relay de e-mail aberto no Chamilo LMS via install.ajax.php Severidade : Alta CVSS 7.5 CWE : CWE-918 SSRF + CWE-306 Autenticação ausente Afetado : chamilo/chamilo-lms 2.0 commit 0195b29 e anteriores Advisory : GHSA-mxc9-9335-45mc NVD :...
CVE-2022-24497
CVE-2022-24497 Ein Zeek-Detektor für CVE-2022-24497: https://vulners.com/cve/CVE-2022-24497 Beispiel-Notices aus dem Test-PCAP: root@kitploit: separator \x09 setseparator , emptyfield empty unsetfield - path notice open 2022-04-13-21-45-25 fields ts uid id.origh id.origp id.resph id.respp fuid...
CVE-2021-3019
Modo de uso & Aviso de isenção de responsabilidade lanproxy — detecção em lote da vulnerabilidade de travessia de diretório CVE-2021-3019 Modo de uso: Python CVE-2021-3019.py url.txt No url.txt, cada url deve estar em uma linha; os endereços vulneráveis são exportados para CVE-2021-3019.csv...
OWASP-Open-Source-Intelligence-Standard
OWASP Open Source Intelligence Standard Aktuelles Release: OOVS v0.1.0 — zehn testbare Anforderungen zur Bewertung eines OSINT-Workflows oder Intelligence-Produkts. Der OWASP Open Source Intelligence Standard OOSIS ist ein von der Community getragenes Programm für sicherere, besser testbare und...
apache__jspwiki_CVE-2022-46907_2-11-3
Apache JSPWiki 2.11 - Dokumentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...
CVE-2021-3122-Details
CVE-2021-3122-Details Blogbeitrag darüber, wie wir eine CVE in AlohaPOS gefunden haben. https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...
RCE_CVE-2024-7954
RCECVE-2024-7954 विवरण: SPIP द्वारा 4.30-alpha2, 4.2.13, और 4.1.16 से पहले उपयोग किया गया porteplume प्लगइन एक मनमाना कोड निष्पादन भेद्यता के लिए असुरक्षित है। एक दूरस्थ और अप्रमाणित हमलावर एक क्राफ्टेड HTTP अनुरोध भेजकर SPIP उपयोगकर्ता के रूप में मनमाना PHP निष्पादित कर सकता है। गंभीर शोषण: POST...
CVE-2026-32247
CVE-2026-32247 — Injeção de Cypher no graphiti-core via nodelabels não sanitizados Severidade : Alta CVSS 8.1 CWE : CWE-943 — Neutralização Incorreta de Elementos Especiais na Lógica de Consulta de Dados Afetado : graphiti-core = 0.28.1 pip Corrigido em : 0.28.2 Advisory : GHSA NVD :...
CVE-2026-27825
CVE-2026-27825 — Path Traversal in mcp-atlassian via confluenceuploadattachment Schweregrad : Kritisch CVSS 9.3 CWE : CWE-22 — Path Traversal Betroffen : sooperset/mcp-atlassian = 0.17.0 Lese-Pendant zu GHSA-xjgw-4wvw-rgm4 Advisory : GHSA NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-27825 TL;D...
secure-by-default-rce-demo
Mitigação de RCE em Node.js: DevOps como a Última Linha de Defesa Este projeto demonstra uma vulnerabilidade crítica de Execução Remota de Código RCE em uma aplicação Next.js especificamente via Server Actions e como o endurecimento da infraestrutura neutraliza efetivamente o ataque mesmo quando ...
CVE-2026-22812-exploit
Ferramenta de Exploração CVE-2026-22812 Kit de exploração completo para CVE-2026-22812 - RCE não autenticado no OpenCode 🎯 Visão Geral A Ferramenta de Exploração CVE-2026-22812 é um framework abrangente de exploração para a vulnerabilidade de execução remota de código não autenticada no OpenCode...