cve-2023-20198

cve-2023-20198 Descrizione. 1vere$k POC sul CVE-2023-20198 basato sul Blog. Include anche un controllo sulla risposta esadecimale secondo l'articolo originale di Cisco. Lo script funziona in due modalità: Modalità check, che effettua semplicemente una connessione all'URL specifico e verifica il...

CHECK-CVE-2025-55182-AND-CVE-2025-66478

CHECK-CVE-2025-55182-AND-CVE-2025-66478 Questo script rileva se un server è affetto dalle vulnerabilità RCE di RSC/Next.js CVE-2025-55182 e CVE-2025-66478. Controlla la risposta del server per firme di vulnerabilità specifiche. Queste firme dovrebbero essere specifiche secondo Searchlight Cyber...

CVE-2023-54258

CVE-2023-54258: In the Linux kernel CIFS code, a race between deferred closes and lease breaks can cause an unmount (kill_sb) to occur before validating tcon->ses during oplock_response, risking a use-after-free. The fix is to reorder checks before sending oplock_response: first ensure openFil...

CVE-2023-53589

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...

xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

Format string

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

Thomson Reuters Concourse & Firm Central 2.13.0097 Directory Traversal / Local File Inclusion

Exploit for windows platform in category web applications ''' Exploit Title: Thomson Reuters Concourse & Firm Central 2.13.0097 - Directory Traversal & Local File Inclusion Exploit Author: 0v3rride Vendor Homepage: https://www.thomsonreuters.com/en.html Software Link: Firm Central...

U.S. Dept Of Defense: Unencrypted __VIEWSTATE parameter in a DoD website

Hi there i realise that the information passing to the server in the subdomain http://████████ can be seen without any encryption thought the VIEWSTATE Parameter. To reduce the change of someone interception the information the parameter should be encrypted due to the sensivity of the information...

GeoClassifieds Lite Multiple Vulnerabilities (Sep 2011) - Active Check

GeoClassifieds Lite is prone to multiple SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...