112884 matches found
The vulnerability of the wsrep_notify_cmd() function in the MariaDB database management system allows a hacker to execute arbitrary commands.
The vulnerability of the wsrepnotifyCmd function in the MariaDB database management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code
The vulnerability of the Shell command shell in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the State Snapshot Transfer (SST) mechanism of the MariaDB database management system allows attackers to execute arbitrary commands.
The vulnerability of the State Snapshot Transfer SST mechanism of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the derive() function in the modules openssl/src/derive.rs and openssl/src/pkey_ctx.rs of the OpenSSL library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the derive function in the modules openssl/src/derive.rs and openssl/src/pkeyctx.rs of the OpenSSL library is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the _libssh2_packet_add() function in the src/packet.c component of the SSH2 implementation library Libssh2 allows a attacker to cause a service failure.
The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260921-73-0131
The vulnerability in Golang is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0128
The vulnerability in Golang is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0041
The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2002-0346
CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...
CVE-2018-10933
POC of CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. Usage : root@kitploit: python3 libssh.py -s SERVERADD -u...
CVE-2023-43147
CVE-2023-43147 Vendedor: PHPJabbers Página web del vendedor: https://www.phpjabbers.com/ Enlace del software: https://www.phpjabbers.com/limo-booking-software Versión: 1.0 Probado en: Windows 10 Pro Impacto: Agregar un usuario atacante con privilegios de administrador CVE: La vulnerabilidad de...
CVE-2024-50968
CVE-2024-50968 Description A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker...
CVE-2020-18325
Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel. Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-siz...
CVE-2015-5531-POC
CVE-2015-5531-POC 漏洞背景 Elasticsearch是荷兰Elasticsearch公司的一套基于Lucene构建的开源分布式RESTful搜索引擎，它主要用于云计算中，并支持通过HTTP使用JSON进行数据索引。 Elasticsearch 1.6.1之前版本中存在目录遍历漏洞。远程攻击者可借助快照的API调用利用该漏洞读取任意文件。 使用说明 root@kitploit: -u 指定URL -f 指定读取的文件 此POC基于网上现有的进行了魔改，将获取的结果自动进行了Unicode解码，代码较粗糙...
CVE-2026-45140
abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-45140 CVE-2026-45140 Chamilo LMS 2.0.0 — chamilo Chamilo LMS es un sistema de gestión del aprendizaje de código abierto. Antes de la versión 2.0.1, Chamilo LMS permite a un atacante remoto no autenticado ejecutar código arbitrario en...
The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.
The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-84077
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...