85086 matches found
InvenTree-Path-Traversal-CVE-2026-33531
CVE-2026-33531 — Traversée de chemin dans les modèles de rapports InvenTree Avis : GHSA-rhc5-7c3r-c769 CVE : CVE-2026-33531 Gravité : Moyenne Publié : 2026-03-20 Crédit : @alonaki Description Une vulnérabilité de traversée de chemin dans le moteur de modèles de rapports permet à un utilisateur de...
CVE-2026-32722
CVE-2026-32722 XSS stocké de Bloomberg Memray via des métadonnées de ligne de commande non échappées Intro J'ai trouvé ce problème en examinant Memray , le profileur mémoire Python de Bloomberg, avec une question simple en tête : Des métadonnées d'exécution contrôlées par un attaquant peuvent-ell...
Heap-Over-Flow-with-CVE-2016-10191
Heap-Over-Flow-with-CVE-2016-10191 Created Research Report to HeapOver flow that CVE 2016-10191...
CVE-2019-6447-in-Mobile-Application
CVE-2019-6447-in-Mobile-Application In this research report you can get completly idea about the CVE 2019-6447 in the real world application and explotations with example. If you want to created video for the exploitation please use below mentions link...
CVE-2024-4358
CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog Usage python CVE-2024-4358.py --target http://192.168.253.128:83 -c...
CVE-2025-46731
CVE-2025-46731 See report.md...
EUVD-2026-94854
Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...
CVE-2026-107574
Progressive Robot hMailServer is vulnerable to a Denial of Service (DoS) attack due to inefficient algorithmic complexity (O(N^2)) in its JSON reader. The component fails to efficiently handle duplicated member names, causing significant processing delays: a 4 MB object can take 300 seconds to pr...
CVE-2026-107574 Inefficient Algorithmic Complexity in hMailServer
Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSON object kept the first of each duplicated member name by searching the members already read, so an object of N...
CVE-2026-94244
The Wallet System for WooCommerce WordPress plugin, in versions before 2.8.0 , is vulnerable to a store-wide wallet transaction disclosure. The root cause is a lack of capability checks where the plugin relies on a token obtainable by any authenticated user from a front-end page to generate repor...
PT-2026-107846
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...
ssdlc-dast-poc
SSDLC DAST PoC Validar DAST em dois microserviços no playgrou...
CVE-2026-6009
⚠️ Disclaimer: This repository is for educational purposes and authorized security testing only. Do not use against systems you do not own or have explicit written permission to test. CVE-2026-6009 Proof of Concept Summary The Jaspersoft report library version = 7.0.3 is vulnerable to a remote cod...
Masscan-Report
Masscan Report Generator A Python tool that generates interactive React-based HTML visualizations from masscan JSON output, featuring a D3.js force-directed network graph. Screenshot Features Interactive Network Graph Force-directed D3.js visualization showing network topology Hierarchical...
pastokrapacefleciks
pastokrapacefleciks, l'analyseur WireShark - PRO Utilisation : Placez votre fichier .pcapng dans le répertoire de pastokrapacefleciks python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Vérifiez votre rapport HTML...
-cve-2010-3904-report
This repository does not have a README...
DEBIAN-CVE-2026-98206
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into responsebuf, which is CYMAXINPUT bytes...
AZL-106341 CVE-2026-98206 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into responsebuf, which is CYMAXINPUT bytes...
CVE-2026-98206
In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into responsebuf, which is CYMAXINPUT bytes...