CVE-2024-27564

CVE-2024-27564 描述： pictureproxy.php 存在一个漏洞，允许远程攻击者通过向 url 参数注入 URL 来执行任意请求。此 SSRF 漏洞无需身份验证即可利用，因此尤为危险。 漏洞代码位于 pictureproxy.php 文件中。问题在于该函数未正确验证 url 参数。$GET'url' 变量被传递给 filegetcontents 函数，该函数会从指定 URL 获取内容。这可能导致 SSRF。 PoC: root@kitploit: ?php if isset$GET'url' $image = filegetcontents$GET'url';...

sunflower_exp

CVE-2022-10270 影响版本： 向日葵个人版 Windows --thread 扫描时的线程数 默认线程数为100 --help 帮助 sunflowerpocexp.py 漏洞验证及扫描工具 端口探测： eg：python sunflowerpocexp.py --scan --ip --port --thread 参数需使用者指定 python sunflowerpocexp.py --scan 均使用默认参数 --scan 扫描参数 --ip 需要扫描的ip地址 默认扫描ip地址为：127.0.0.1 --port 需要扫描的端口列表 默认扫描端口为：...

CVE-2026-11967

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an...

CVE-2026-11879

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified by the user. During startup, the application searches for specific DLLs in this location before resorti...

CVE-2026-11967 Arbitrary code execution in MobaXterm Personal Edition (Portable)

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an...

CVE-2026-11879 Arbitrary code execution in MobaXterm Personal Edition (Portable)

MobaXterm Personal Edition Portable, in its 26.3 version Build 5154, allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified by the user. During startup, the application searches for specific DLLs in this location before resorti...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-41119

Technical details are not publicly provided in the supplied documents. Monitor for updates from Dell/NVD for affected products, impact, and remediation.

CVE-2026-41119

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

PT-2026-41664

Dell Live Optics Windows and Personal Edition collectors contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

EUVD-2001-1121

Malware in sbrugna...

EUVD-2002-1664

Malware in sbrugna...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42713

CVE-2021-42713 affects Splashtop Remote Client (Personal Edition) up to version 3.4.6.1. The vulnerability stems from the creation of a Temporary File in a directory with insecure permissions, enabling potential local impact. PT-2022-11668 documents this issue and provides a remediation path: upg...

PT-2022-11668 · Splashtop · Splashtop Remote Client

Name of the Vulnerable Software and Affected Versions: Splashtop Remote Client Personal Edition versions 3.4.6.1 and earlier Description: The issue is related to the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions 3.4.6.1 and earlier, update to...

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...