284 matches found
CVE-2022-22980
SpEL RCE Exploit - CVE-2022-22980 استغلال لتنفيذ الأوامر عن بُعد RCE على Spring Data عبر حقن SpEL Spring Expression Language. الوصف الثغرة يُعرّض الصندوق نقطة نهاية /search التي تقبل معامل trackingid معرّض لحقن SpEL. يسمح هذا الحقن بتنفيذ تعبيرات Java خبيثة مباشرة على الخادم. مبدأ الاستغلال 1. حق...
CVE-2023-51504
CVE-2023-51504 هذا هو إعادة إنتاج مُحَوْل إلى Docker لحقن SQL في MotoCMS راجع قاعدة بيانات الاستغلال الوصف حقن SQL في MotoCMS الإصدار 3.4.3 عبر معلمة الكلمة المفتاحية على الرابط https://template189526.motopreview.com/store/category/search/?keyword=1 تضمن إعادة إنتاج الثغرة تعريف في ملف Dockerfile...
CVE-2026-33146
CVE-2026-33146 كانت إحدى المشاركات العامة تبدو نظيفة في شجرة الصفحات، لكن نقطة نهاية البحث روت قصة مختلفة. في Docmost، يمكن للصفحات الفرعية المقيدة المخفية عن مشاهدي المشاركات العامة أن تتسرب عبر نتائج بحث المشاركات العامة. مقدمة عثرتُ على هذه المشكلة أثناء مراجعة Docmost ، وهي منصة تعاونية مفتوح...
CVE-2025-63572
الوصف تم اكتشاف ثغرة حقن SQL في نقطة النهاية المسؤولة عن البحث عن عملاء المنصة Zentrajuris v.1.0. يتم دمج إدخال المستخدم المرسل إلى معامل البحث مباشرةً في استعلام SQL دون تعقيم/توسيط مناسب، مما يسمح للمهاجم بالتلاعب بالاستعلام. نقطة النهاية المتأثرة iqopgbljnxmxlzvzbvgy.supabase.co/rest/v1/client...
CVE-2026-77348
Wallos , an open-source self-hostable subscription tracker, ships a second unauthenticated logo-image search endpoint—endpoints/payments/search.php—that was missed when the original httpoxy SSRF fix (CVE-2026-33407) hardened endpoints/logos/search.php. Prior to version 5.0.0 , the endpoint passes...
CVE-2026-14567
The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...
EUVD-2026-67568
The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...
CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...
CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...
EUVD-2026-67230
Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...
CVE-2026-77438
Trilium (open-source hierarchical note-taking app), in versions up to and including 0.103.0 , has an authorization flaw in its public share-search endpoint . The endpoint authorizes only the ancestor note supplied in the request, then performs a full-text search across the entire published subtre...
CVE-2026-48786
Fleet , an open-source device management platform built on osquery, has an information disclosure flaw in the target search endpoint (POST /api/latest/fleet/targets). Prior to v4.87.0 , this endpoint failed to mask team enroll secrets and full team configuration (including credential-bearing agen...
CVE-2026-48786 Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint
Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint POST /api/latest/fleet/targets returned unmasked team enroll secrets and full team configuration, including credential-bearing agent options, to low-privilege observer-clas...
JetBrains YouTrack < 2026.2.18112 Information Disclosure (CVE-2026-75046)
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18112. It is, therefore, affected by an information disclosure vulnerability: - An authenticated user could enumerate accounts via the users search endpoint. CVE-2026-75046 Note that Nessus has not tested for this...
CVE-2026-75046
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
CVE-2026-75046
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
EUVD-2026-60245
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
CVE-2026-75046
In JetBrains YouTrack before 2026.2.18112 an authenticated user could enumerate accounts via the users search endpoint...
CVE-2026-75046
JetBrains YouTrack before 2026.2.18112 has an authenticated user enumeration flaw in the users search endpoint, allowing account discovery (CVSS 4.3 MEDIUM). No exploitation details are provided; upgrade to 2026.2.18112 or later. Monitor JetBrains issue tracker for further advisories.
