1260 matches found
CVE-2024-24576-PoC-BatBadBut
CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerability "BatBadBut" Information After running the script will ask you for an argument, the argument will be passed the the bat file, if you close the argument with " and after that & you can run any Windows command. For example:...
attestos
attestos Experimental Linux boot-attestation image and evidence harness for testing what an anti-cheat vendor could verify instead of relying on a distribution-name allowlist. The mechanism, the threat model, and the vendor specification live in plunder707/attested-gaming. This repository is the...
cve-2023-1671
Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: root@kitploit: $rc += system"$sblistpack '$ur...
discourse-CVE-2023-45806
yksivaihde-CVE-2023-45806 CVE: https://github.com/discourse/discourse/security/advisories/GHSA-hcgf-hg2g-mw78 Patch: https://github.com/discourse/discourse/commit/7d484864fe91ff79c478f57e7ddb1235d701921e usage: fixquoteattribution"Username|", , where "Username|" is the unique search string within...
CVE-2019-12189
CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...
CVE-2024-24576-PoC-Python
CVE-2024-24576-Poc-Python Un POC rápido para la vulnerabilidad revelada aquí https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ Después de ejecutar el script, se solicitará un argumento para pasar al archivo BAT. En la captura de pantalla se puede ver que a...
CVE-2026-14962
CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quote unauthenticated SQL injection ELEX WooCommerce Request a Quote WordPress plugin elex-request-a-quote ≤ 2.4.0 — unauthenticated SQL injection via the public elexraqaddtoquote AJAX action. For authorized testing only. Do not run this...
CVE-2026-89241
WWBN AVideo contains a reflected cross-site scripting (XSS) vulnerability in confirmLivePassword.php . The root cause is that the script copies the REQUEST_URI variable directly into a form action attribute without encoding. An attacker can craft a malicious URL containing a quote character to br...
EUVD-2026-76053
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross-site scripting vulnerability in confirmLivePassword.php that copies REQUESTURI into a form action attribute without encoding. Attackers can craft a malicious URL with a quote character to break out of t...
CVE-2026-87859
A flaw was found in morgan, an HTTP request logger middleware for Node.js. An unauthenticated remote attacker can exploit this vulnerability by injecting an unescaped double quote into a log field they control, such as the User-Agent or Referer header. This causes the log field to close...
CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
CVE-2026-87859
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1 , the escapeLogField() function fails to escape the double quote character, which delimits quoted fields in the Apache combined log format. An unauthenticated remote attacker who controls a value written to a quote...
CVE-2026-87859 morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
EUVD-2026-76027
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
CVE-2026-22226
CVE-2026-22226 Proof of Concept for CVE-2026-22226 Authenticated LAN-side OS Command Injection in the VPN Client of TP-Link Archer Wi-Fi routers Vulnerability brief The VPN Client controller stores the user-controlled entry description des in the UCI configuration with a weak validation regex. Wh...
Linux Distros Unpatched Vulnerability : CVE-2026-87859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, whic...
PT-2026-89814
morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogField function does not escape the double quote character, which delimits the quoted fields of the Apache combined log format that morgan emits. An unauthenticated remote attacker who controls a value...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...