CVE-2019-12180

CVE-2019-12180 Avis & PoC SoapUI et ReadyAPI vous permettent de créer ou d'ajouter des contenus dynamiques aux cas de test par exemple, pour calculer un horodatage à la volée à l'aide de scripts en langage Apache Groovy. L'exécution de ces scripts peut être déclenchée de nombreuses manières et il...

RISE-Ultimate_Project_Manager_e_CRM

CVE-2025-3855 - RISE Ultimate Project Manager - IDOR Vulnérabilité de sécurité : IDOR Insecure Direct Object Reference Composant affecté : endpoint de téléversement d'image de profil, contrôleur teammembers Logiciel : RISE - Ultimate Project Manager & CRM Éditeur : codecanyon Version : 3.8.2 CVE...

FOG-Project

FOG-Project FOG Project CVE-2024-39914 - Vulnérabilité d'exécution de commande...

CVE-2020-16012-PoC

Projet M2 - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...

CVE-2025-26198

🛡️ CVE 공개: CVE-2025-26198 — CloudClassroom-PHP-Project의 SQL 인젝션 공개일: 2025년 6월 18일 CVE ID: CVE-2025-26198 심각도: CRITICAL CVSS 9.8 🧩 요약 CloudClassroom-PHP-Project v1.0의 loginlinkadmin.php 엔드포인트에 치명적인 SQL 인젝션 취약점이 존재합니다. 이 애플리케이션은 SQL 쿼리에 검증되지 않은 사용자 입력을 직접 사용하므로, 인증되지 않은 공격자가 인증을 우회하고 완전한 관리자 접근 권한을...

CVE_6387

Ceci est un projet Next.js amorcé avec create-next-app. Pour commencer Tout d'abord, lancez le serveur de développement : npm run dev or yarn dev or pnpm dev or bun dev Ouvrez http://localhost:3000 dans votre navigateur pour voir le résultat. Vous pouvez commencer à modifier la page en éditant...

CVE-2023-45827

CVE-2023-45827 Aperçu de la vulnérabilité CVE-2023-45827 CVSS : 9.8 3 novembre 2023 ProtoType Pollution dans le package node.js Dans le cadre du projet rebob Description de la vulnérabilité Avis GitHub Il s'agit d'une vulnérabilité Prototype Pollution PP dans dot-diver. Elle peut entraîner une RC...

CVE-2026-103293

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2026-103293

The MPG WordPress plugin before version 4.2.3 is vulnerable to an arbitrary file read flaw. The root cause is a failure to validate that a dataset source supplied during project import is a remote URL; instead, the system treats it as a local filesystem path and copies the content into a publicly...

CVE-2026-103293 MPG < 4.2.3 - Editor+ Arbitrary File Read via Project Import

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

EUVD-2026-91933

The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role an...

CVE-2024-9465

CVE-2024-9465 Injection SQL Checkpoint via attaque temporelle CVE-2024-9465 RECHERCHE SHODAN https://www.shodan.io/search?query=html%3A%22Expedition+Project%22 html:"Expedition Project" RECHERCHE FOFA https://en.fofa.info/ body="Expedition Project" || title="Expedition Project" UTILISATION python...

[SECURITY] Fedora 44 Update: hplip-3.26.6-1.fc44

The Hewlett-Packard Linux Imaging and Printing Project provides drivers for HP printers and multi-function peripherals...

CVE-2026-104019

An OS command injection vulnerability exists in the Studio Space startup validation script of Amazon SageMaker Distribution (versions 2.x &lt; 2.14.12, 3.x &lt; 3.9.12, 4.0.x &lt; 4.0.11, 4.1.x &lt; 4.1.11, 4.2.x &lt; 4.2.8, 4.3.x &lt; 4.3.5, and 4.4.x

CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...

CVE-2026-104843

uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...

Exploit for Unrestricted Upload of File with Dangerous Type in Glpi-Project Glpi

CVE-2025...

CVE-2026-104606

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-104606 itsourcecode Online Admission System Project confirm.php sql injection

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...