149736 matches found
EUVD-2026-91375
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...
CVE-2026-63567 IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)
Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified ciphertexts for decryption under the same key pair, to recover its plaintext via a CBC...
avscript
Avast Antivirus JavaScript 인터프리터 참고: 2020년 3월 11일, Avast은 트윗을 통해 이 인터프리터를 전역적으로 비활성화하기로 결정했다고 발표했습니다! Avast 안티바이러스의 주요 프로세스는 AvastSvc.exe이며, SYSTEM 권한으로 실행됩니다. 이 서비스는 저수준 안티바이러스 엔진을 로드하고, 파일시스템 미니필터나 가로챈 네트워크 트래픽 같은 출처에서 수신한 신뢰할 수 없는 데이터를 분석합니다. 설계상 높은 권한을 가지며 신뢰할 수 없는 입력을 처리함에도 불구하고, 이 프로세스는 샌드박...
CVE-2026-104123
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...
CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...
CVE-2026-104123
The SourceCodester Online Reviewer Management System 1.0 is vulnerable to SQL injection due to an unknown functionality in the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. By manipulating the Title argument, an attacker can execute arbitrary SQL commands. This...
CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit
이 저장소에는 README가 없습니다...
CVE-2026-104053
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
CVE-2026-104053
The itsourcecode Pet Shop Management System 1.0 is vulnerable to SQL injection via an unknown function in the admin_reservefilter.php file. The flaw occurs because the filter argument is improperly handled, allowing for remote exploitation. While the documents do not provide specific remediation ...
CVE-2026-73637
A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...
EUVD-2026-91158
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...
CVE-2021-24086
CVE-2021-24086 이것은 CVE-2021-24086 "Windows TCP/IP 서비스 거부 취약점"에 대한 개념 증명입니다. 이는 2021년 2월 Microsoft가 패치한 tcpip.sys의 NULL 역참조 취약점입니다. 이 트윗에 따르면, 취약점은 @piazzt에 의해 발견되었습니다. IPv6를 통해 악성 UDP 패킷을 전송하여 원격으로 트리거할 수 있습니다. Microsoft의 블로그를 여기에서 읽을 수 있습니다: TCP/IP에 영향을 미치는 여러 보안 업데이트: CVE-2021-24074,...
CVE-2026-103227
A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gfdashresolveurl of the file src/mediatools/dashclient.c of the component DASH Client. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. Upgrading to version...
ROS-20261002-73-0034
The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
PT-2026-104122
Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-46037)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505962; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2025-70886
CVE-2025-70886 CVE-2025-70886에 대한 개념 증명PoC 익스플로잇입니다. Halo CMSv2.22.4 및 이전의 지속적 서비스 거부 취약점으로, 원격 공격자가 변조된 페이로드를 제출하여 관리자 댓글 인터페이스를 충돌시킬 수 있습니다. 기본 정보 Product Vendor: 凌霞软件 Vendor Website: https://www.lxware.cn/ Affected Object Type: 소프트웨어 / 웹 애플리케이션 Affected Product: Halo CMS Affected Product...
OpenSSH-CVE-2024-6387-Fix
CVE-2024-6387 OpenSSH 취약점 완화 스크립트 개요 이 Bash 스크립트는 OpenSSH의 CVE-2024-6387 취약점을 완화하는 데 도움을 주기 위해 설계되었습니다. 이 취약점은 특정 버전의 OpenSSH에 영향을 미치며, 원격의 인증되지 않은 공격자가 시스템에서 임의 코드를 실행할 수 있게 할 가능성이 있습니다. 이 스크립트는 안전한 버전의 OpenSSH로 업그레이드하거나, 악용 위험을 줄이기 위한 임시 수정을 적용하는 옵션을 제공합니다. 영향을 받는 버전 취약한 버전: CVE-2006-5051 및...
mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header
A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...