CVE-2025-26466

CVE-2025-26466 CVE-2025-26466 的 PoC 作者：Fikret Can Gurbuz 使用方法 root@kitploit: python3 poc.py -i -p 步骤如下： 1. TCP 连接到端口 2. 接收服务器横幅（SSH-2.0-OpenSSHX.Xp1） 3. 发送客户端横幅（SSH-2.0-YourClient\r\n） 4. 发送 wrapsshpacketbuildkexinit 5. 接收服务器的 KEXINIT 响应 6. 循环发送 buildping ! 永远不要完成 KEX，因此 pong 响应将无限排队...

CLSA-2026-1784077475 TuxCare security update for monolog/monolog (13 CVEs)

TuxCare rebuilt monolog/monolog to address 13 CVEs. Fixed in 1.11.0-p1+tuxcare...

CLSA-2026-1782867594 TuxCare security update for zendframework/zendframework (1 CVE)

TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p1+tuxcare...

CLSA-2025-1766019429 TuxCare security update for dompdf/dompdf (7 CVEs)

TuxCare rebuilt dompdf/dompdf to address 7 CVEs. Fixed in 1.2.2-p1+tuxcare...

CLSA-2025-1766364765 TuxCare security update for dompdf/dompdf (8 CVEs)

TuxCare rebuilt dompdf/dompdf to address 8 CVEs. Fixed in 0.8.6-p1+tuxcare...

CLSA-2025-1761785347 TuxCare security update for laravel/framework (1 CVE)

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 8.83.29-p1+tuxcare...

CLSA-2026-1779324459 TuxCare security update for swiftmailer/swiftmailer (2 CVEs)

TuxCare rebuilt swiftmailer/swiftmailer to address 2 CVEs. Fixed in 6.0.2-p1+tuxcare...

CVE-2018-25403

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to citygraph.php with crafted SQL payloads to extract sensitive database...

CVE-2018-25401

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to severgraph.php with crafted SQL payloads to extract sensitive databas...

CVE-2018-25402

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to inctypesgraph.php with crafted SQL payloads to extract sensitive...

EUVD-2018-21925

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to citygraph.php with crafted SQL payloads to extract sensitive database...

CVE-2018-25403

The CVE-2018-25403 entry affects The Open ISES Project 3.30A. The vulnerability is a SQL injection in city_graph.php reachable via the p1 parameter, allowing unauthenticated attackers to send crafted GET requests to extract sensitive database information (including schema names). The underlying c...

CVE-2018-25403 The Open ISES Project 3.30A SQL Injection via city_graph.php

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to citygraph.php with crafted SQL payloads to extract sensitive database...

EUVD-2018-21924

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to inctypesgraph.php with crafted SQL payloads to extract sensitive...

CVE-2018-25402

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to inctypesgraph.php with crafted SQL payloads to extract sensitive...

CVE-2018-25401

The CVE-2018-25401 entry relates to the Open ISES Project 3.30A, where an SQL injection vulnerability in sever_graph.php can be triggered by crafting the p1 parameter in GET requests. Unauthenticated attackers can execute arbitrary SQL queries and extract sensitive data, including database schema...

EUVD-2018-21923

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to severgraph.php with crafted SQL payloads to extract sensitive databas...

CVE-2018-25401 The Open ISES Project 3.30A SQL Injection via sever_graph.php

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to severgraph.php with crafted SQL payloads to extract sensitive databas...

CVE-2018-25402 The Open ISES Project 3.30A SQL Injection via inc_types_graph.php

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to inctypesgraph.php with crafted SQL payloads to extract sensitive...

CVE-2018-25401

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to severgraph.php with crafted SQL payloads to extract sensitive databas...