CVE-2024-5961

CVE-2024-5961 2ClickPortalにおける反射型XSS バージョン: 7.2.31から7.6.4まで。 intext:"Powered by 2ClickPortal" PoC https://domain/szukaj/?searchlang=pl&search=all&string=" onfocus=alert1 autofocus="...

CVE-2023-45542

CVE-2023-45542 mooSocial v3.1.8 の検索機能の q パラメータに反射型クロスサイトスクリプティング（XSS）の脆弱性が存在します。攻撃者は巧妙に細工された URL を介して、ユーザーのセッション Cookie を窃取し、そのアカウントになりすますことができます。 脆弱なパラメータ: q エクスプロイト - 概念実証（POC） 反射型クロスサイトスクリプティング（XSS） Payload : test"alert1test FINAL Payload URL encoded :...

python-haystack

python-haystack メモリフォレンジックス |travis| |coverage| |landscape| |pypi| |docs| クイックスタート クイック使用ガイド docs/ フォルダ内 Haystack-reverse CLI docs/ フォルダ内 詳細ドキュメント はじめに python-haystack は、割り当てられたメモリ内の C 構造体の検索とリバースエンジニアリングに特化したヒープ分析フレームワークです。 最初の機能/API は SEARCH 関数です。プロセスメモリダンプや動作中のプロセスメモリ内で既知のレコードタイプを検索する機能を提供します。...

MooSocial 3.1.8 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. id: CVE-2023-45542 info: name: MooSocial 3.1.8 - Cross-Site Scripting author...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - リモートコマンド実行 CVE-2014-6287 🚨 エクスプロイトについて これは、CVE-2014-6287 として識別される Rejetto HttpFileServer HFS v2.3.x の既知の リモートコマンド実行脆弱性 に対する概念実証エクスプロイトです。 脆弱な検索機能を悪用することで、攻撃者は巧妙に細工されたペイロードを注入し、対象マシン上で任意のシステムコマンドを実行できます。 📌 詳細 エクスプロイトタイトル: Rejetto HttpFileServer 2.3.x - リモートコマンド実行...

CVE-2024-50677

CVE-2024-50677 | OroPlatform CMS v5.1 におけるツークリック反射型XSS このリポジトリは、CVE-2024-50677 の概念実証（PoC）を示すものです。 免責事項: このコードは、本脆弱性の概念実証です。本エクスプロイトの使用によって生じたいかなる結果についても、私は責任を負いません。 説明: CVE-2024-50677 は、OroPlatform CMS v5.1...

EUVD-2026-89471

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954 Toptech TMS7 and TopHAT SQL Injection

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-68954 Toptech TMS7 and TopHAT SQL Injection

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...

CVE-2026-81270

Apache Allura versions through 1.20.0 are vulnerable to the exposure of non-public information via the search functionality. This vulnerability allows an unauthorized actor to access sensitive information. To remediate this issue, users are recommended to upgrade to version 1.21.0 .

CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...

CVE-2026-76212

phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character '=' in the Search/Database/Pgsql.php backend while escapeLikeWildcards escapes user input with the '|' prefix. As a result, wildcard escaping is a no-op and...

CVE-2026-56790 CANBoat - Off-by-One Global Buffer Overflow in searchForPgn()

CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer overflow in the searchForPgn function in analyzer/pgn.c that allows remote attackers to crash the application. Attackers can deliver a crafted NMEA-2000 message with an out-of-range PGN value over CAN bus or...

CVE-2026-11772 Reflected XSS in DRIMO CMS

DRIMO CMS is vulnerable to Reflected XSS via q parameter in searching functionality. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is in End Of Life phase and will not receive any updates. However, deleting info.php fi...

HCL Digital Experience Compose 安全漏洞

HCL Digital Experience Compose is an enterprise-level content creation and digital experience management platform developed by the Indian company HCL. HCL Digital Experience Compose has a security vulnerability, which stems from a reflection-type cross-site scripting issue in the search center...

EUVD-2026-33473

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153 westboy CicadasCMS AbstractCacheManager.java search cross site scripting

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...

CVE-2026-10153

A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...