EUVD-2026-95569

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...

CVE-2026-106491

A flaw was found in the Backstage plugin-proxy-backend component. An authenticated remote attacker can exploit improper input validation by submitting a specially crafted request URL to the proxy backend. This causes the proxy service to forward requests to endpoints outside the configured base...

EUVD-2026-95565

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2025-7558-PoC

CVE-2025-7558-PoC Resumen Se ha encontrado una vulnerabilidad etiquetada como crítica en code-projects Voting System 1.0. El elemento afectado es una función desconocida del archivo /admin/positionsadd.php. Dicha manipulación del argumento Description conduce a una inyección SQL. Esta...

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

CVE-2023-22515

CVE-2023-22515 Información principal sobre CVE-2023-22515 Producto afectado: Atlassian Confluence Data Center & Confluence Server. Fecha de publicación: 04/10/2023. Gravedad: Critical CVSS 10.0. Tipo de vulnerabilidad: Broken Access Control / Improper Authorization → permite al atacante crear una...

CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC Proof-of-concept exploit for CVE-2026-49975, a remote denial-of-service vulnerability in HTTP/2 server implementations. Discovered by Quang Luong Calif Security Research, disclosed June 2, 2026. For authorized security testing only. Do not use against infrastructu...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Desbordamiento de búfer remoto...

avscript

Avast 防病毒软件 JavaScript 解释器 注意：2020年3月11日，Avast 宣布 他们已决定全局禁用此解释器！ Avast 防病毒主进程名为 AvastSvc.exe，以 SYSTEM 权限运行。 该服务加载底层防病毒引擎，并分析来自文件系统微过滤器或拦截的网络流量等来源的不可信数据。 尽管它拥有高权限且设计上处理不可信输入，但它没有沙箱保护，且缓解措施覆盖不足。此进程中的任何漏洞都是关键的，且容易被远程攻击者利用。 所以……包含一个自定义的 JavaScript 解释器可能不太妙……？？？？🙃 本仓库包含一个交互式 shell，可让您在 Linux...

CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - Una contraseña codificada en el código de Super Store Finder v3.6 permite a los atacantes acceder al panel de administración. Tipo de vulnerabilidad Control de acceso incorrecto Proveedor del producto Super Store Finder Base de código del producto afectado Super...

CVE-2020-23586

CVE-2020-23586 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" vulnerabilidad encontrada en el "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" que permite a un atacante remoto no autenticado realizar un...

CVE-2022-4944

「💥」CVE-2022-4944 Descripción Se ha encontrado una vulnerabilidad clasificada como problemática en kalcaddle KodExplorer hasta la versión 4.49. Afecta a una parte no especificada. La manipulación conduce a cross-site request forgery CSRF. Esta vulnerabilidad está identificada de forma única como...

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

Este repositorio no tiene un README...

cve-2024-10914

POC - CVE-2024–10914 - Vulnerabilidad de Inyección de Comandos en el parámetro name para D-Link NAS Resumen Se encontró una vulnerabilidad en D-Link DNS-320, DNS-320LW, DNS-325 y DNS-340L hasta la versión 20241028. Se ha declarado como crítica. Esta vulnerabilidad afecta a la función cgiuseradd d...

Mage AI - Insecure Default Authentication Setup

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The manipulation leads to insecure default initialization of resource. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability i...

Fortinet FortiWeb - Authentication Bypass to Admin Privilege

A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges o...

Weaver OA 9.5 - Information Disclosure

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/urlpage/mobileurl/configfile/jx2config.ini. The manipulation leads to files or directories accessible. The attack may be initiated remotely. id:...

Academy LMS 6.2 - Cross-Site Scripting

A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument...

Landray EKP - Path Traversal

A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sysuicomponent/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to...

9router <=0.5.4 - Authentication Bypass

9Router prior to 0.5.6 contains an authentication bypass caused by trusting client-supplied X-9r-Real-Ip header in src/dashboardGuard.js, letting remote unauthenticated attackers access local API routes and consume resources, exploit requires bypassing API-key validation via header manipulation...