3643 matches found
waf-bypass
WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...
WordPress Media Library Assistant < 3.40 - SQL Injection
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role and above to perform SQL injection. id: CVE-2026-16959 info: name: WordPress Media...
printix-CVE-2022-29552
CVE-2022-29552 Simple Release | Print Friendly A "Incorrect Use of Privileged APIs" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability change any values within the...
CVE-2023-38831-POC
CVE-2023-38831-POC Proof-of-concept of CVE-2023-38831 Note: The "GTA Leak" file isn't real. It's just zeros without ones "What should i click? The folder or the file?"...
CVE-2026-97859-CYB-Analysis
REDEEMER’S UNIVERSITY, EDE FACULTY OF COMPUTING AND DIGITAL TECHNOLOGIES DEPARTMENT OF CYBER SECURITY ANALYSIS OF CVE-2026-97859 Authorization Bypass Vulnerability Submitted by: Ahiamadu Uchechukwu Matriculation Number: RUN/MEE/22/12168 Department: Cyber Security 1. Introduction Cybersecurity is...
CVE-2025-43867
Dependency on Vulnerable Third-Party Component vulnerability in Johnson Controls FX Server, Johnson Controls FX80, and Johnson Controls FX90 allows CAPEC‑17: Accessing, Modifying or Deleting Files. This issue affects FX Server: before 14.10.10 and before 14.14.1; FX80: before 14.14.10 and before...
EUVD-2025-211325
Dependency on Vulnerable Third-Party Component vulnerability in Johnson Controls FX Server, Johnson Controls FX80, and Johnson Controls FX90 allows CAPEC‑17: Accessing, Modifying or Deleting Files. This issue affects FX Server: before 14.10.10 and before 14.14.1; FX80: before 14.14.10 and before...
CVE-2025-43867
A dependency on a vulnerable third-party component in Johnson Controls products allows for accessing, modifying, or deleting files (CAPEC-17). Affected products include FX Server (versions before 14.10.10 and 14.14.1), FX80 (versions before 14.14.10 and 14.14.1), and FX90 (versions before 14.10.1...
CVE-2026-86355
Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance...
CVE-2026-86355
Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance...
CVE-2026-86355
The Dell PowerStore appliance is affected by an External Control of File Name or Path vulnerability (CWE-73 ). A remote authenticated attacker could exploit this flaw to potentially achieve privilege escalation on the appliance. The vulnerability has a CVSS 3.1 score of 8.3 (High) . Remediation d...
EUVD-2026-125279
Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance...
fuck_cve_2026_31431
fuckcve202631431 make KERNELVER=uname -r : for LKM sudo insmod fuck-cve-2026-31431.ko regfakeimpl=1 : for builtin sudo insmod fuck-cve-2026-31431.ko...
CVE-2026-127091 Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, VFS Mount Policy Bypass via Non-Canonical Paths
Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, contain an improper path equivalence flaw in VirtualFileFactory.canonicalisePath that bypasses mount-level access policy. Authenticated users can supply paths with duplicate separators...
PT-2026-146828
Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance...
mysql: MySQL Server: Denial of service in the Server Optimizer
A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service DoS for the database service...
CVE-2026-106018
Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass. This issue affects EasyIO FW: through 3.0b25...
EUVD-2026-124711
Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass. This issue affects EasyIO FW: through 3.0b25...
CVE-2026-106018
The Johnson Controls EasyIO FW (versions through 3.0b25 ) is vulnerable to an Authentication Bypass via an alternate path or channel (CWE-288 ). This vulnerability allows an attacker to bypass authentication mechanisms, potentially leading to unauthorized access. Exploitation details and specific...