4836 matches found
tiktok-scraper
TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...
rtl_433
rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...
CVE-2026-90556
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...
CVE-2024-54819
CVE-2024-54819 詳細はこちら: https://www.partywave.site CVE-2024-54819について ログインへのPOSTリクエスト 攻撃者はログイン済みである必要があります root@kitploit: POST /librarian/index.php/authentication HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:128.0 Gecko/20100101 Firefox/128.0 removed ... Content-Type:...
WPBot <= 8.4.9 - Cross-Site Scripting
WPBot = 8.4.9 is vulnerable to stored cross-site scripting via the conversation parameter in the qcldwbchatbotconversationsave AJAX action. The AJAX nonce qcsecretbotnonceval123qc is publicly emitted on every frontend page via wplocalizescript under the ajaxnonce key, making it freely obtainable ...
Emerson Dixell XWEB-500 - Arbitrary File Write
Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...
tagDiv Composer < 4.2 - Stored Cross-Site Scripting
tagDiv Composer plugin versions before 4.2 for WordPress are vulnerable to unauthenticated stored XSS via the /wp-json/tdw/savecss endpoint. An attacker can inject malicious JavaScript code through the compiledcss parameter, which gets stored and executed when the CSS is loaded. id: CVE-2023-3169...
CVE-2026-80936
A flaw was found in the Linux kernel's mt7925 Wi-Fi driver. During multi-link power-save setup, the mlopmwork is queued with a delay but not properly cancelled when the device is stopped. This can lead to the work item attempting to access a deallocated workqueue, resulting in a kernel warning an...
CVE-2026-80936
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...
CVE-2026-80936 wifi: mt76: mt7925: cancel mlo_pm_work on stop
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...
CVE-2017-0261
CVE-2017-0261 и анализ образца эксплойта 0x01 Описание уязвимости Причина: при открытии документа Office, FLTLDR.EXE используется для отображения встроенного EPS-файла, содержащего уязвимость. Этот файл написан на языке PostScript и может быть использован атакующим с помощью операции...
CVE-2021-21123-PoC-Google-Chrome
📝 설명 Google Chrome - File System Access API - Maciej Pulikowski가 보고한 취약점 총 버그 바운티 보상: $5.000 다음은 개념 증명PoC입니다: Google SecuritySeverity CVE 높음 CVE-2021-21123 중간 CVE-2021-21129 중간 CVE-2021-21130 중간 CVE-2021-21131 중간 CVE-2021-21172 낮음 CVE-2021-21141 주요 보안 문제는 Google Chrome이 실행하는 운영 체제 대화 상자 "Save as"...
save-pixels-updated
Это обновлённая версия save-pixels, в которой исправлена уязвимость CVE-2020-8175. На момент создания все файлы идентичны оригинальному репозиторию, за исключением package.json. save-pixels-updated Ниже приведён текст со страницы на GitHub. Как уже упоминалось, этот репозиторий не содержит...
CVE-2026-37067
CVE-2026-37067 Некорректный контроль доступа в /vfm-admin/admin-panel/view/save-cvs.php в Veno File Manager Project 4.4.9 позволяет неаутентифицированному атакующему извлекать все логи приложения с заданной даты и далее с помощью специально сформированного POST-запроса...
session_reaper_lab
CVE-2025-54236 - SessionReaper Lab Среда Docker для практической демонстрации CVE-2025-54236 SessionReaper: десериализация объектов PHP, приводящая к RCE в Magento Open Source 2.4.7. Использовать только в контролируемой среде. Не запускать против систем без явного разрешения. О уязвимости...
CVE-2026-45767 Suricata datasets: save to absolute filename can be bypassed when combined with load command
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...
CVE-2026-45767
Suricata (network IDS/IPS/NSM engine) versions prior to 7.0.16 and 8.0.5 contain a vulnerability in the datasets feature where the save command's protection against absolute filenames can be bypassed when combined with the load command. A malicious rule could potentially overwrite any file on the...
Craft-CMS-3.0.25---Cross-Site-Scripting
Craft-CMS-3.0.25 - 크로스 사이트 스크립팅 Craft CMS 3.0.25 - 크로스 사이트 스크립팅 취약점 CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 개념 증명 콘솔 탭에서 새 제목을 저장하여 크로스 사이트 스크립팅을 실행할 수 있습니다. root@kitploit: POST /admin-panel-path/index.php?p=admin/actions/entries/save-entry HTTP/1.1 Host: IP:PORT User-Agent:...
CVE-2026-27541-Analysis-Lab
CVE-2026-27541 — WooCommerce Wholesale Prices 認証済み権限昇格ラボ 概要 このプロジェクトは、WooCommerce Wholesale Prices / Wholesale Suite プラグインにおける CVE-2026-27541 の挙動を、脆弱な ビルドとパッチ適用済み ビルドを同一マシン上で並行して比較しながら分析・再現するためのローカル Docker ラボです。 中核となる問題は、以下の REST API エンドポイントにおけるアクセス制御の欠陥 Broken Access Control です: root@kitploit:...