41166 matches found
SUSE CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
HFS CVE-2014-6287 search macro RCE
CVE-2014-6287 HttpFileServer 2.3–2.3c: NUL-byte desync in the search handler allows .exec|cmd. macro execution without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Rejetto HFS CVE-2014-6287 unauthenticated search macro command execution.""" from future import annotations from...
sqliv
SQLiv Massive SQL injection scanner Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing so the...
UBUNTU-CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
CVE-2024-6473-PoC
CVE-2024-6473 PoC Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. Vulnerable browser version !IMPORTANT The Internet must be turned off during installation, otherwise the browser will be updated. You can download vulerable...
CVE-2026-116207
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...
CVE-2026-116207 YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...
CVE-2026-116207 YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...
CVE-2026-116207
YesWiki versions 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 are vulnerable to an unauthenticated SQL injection within the SearchManager::prepareSearchRequest() function. The root cause is the improper handling of field names from the query and searchfields parameters of the public Ba...
CVE-2026-116207 YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...
EUVD-2026-109465
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest. Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escap...
Malicious Package
Overview insta-reel-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview youtube-search-without-api-key is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious Package
Overview ionic-insta-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview ionic-youtube-search is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-18258 Malicious code in insta-reel-search (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc584c5e885d66c7d3e895a467192ddd7a40082a2fe2df9ad45d8835ba65c4e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in insta-reel-search (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc584c5e885d66c7d3e895a467192ddd7a40082a2fe2df9ad45d8835ba65c4e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in insta-reel-search
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-18259 Malicious code in ionic-insta-search (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407c310ce45465666130259c09efcd3fbcb31a3d0173587bd2c4db6a078cc70a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...