264149 matches found
ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization
Zoho ManageEngine OpManager Stable build before 125203 and Released build before 125233 allows Remote Code Execution via the Smart Update Manager SUM servlet. id: CVE-2020-28653 info: name: ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization author: iamnoooob,pdresearch severity:...
ThinkPHP < 3.2.4 - Remote Code Execution
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...
Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...
Ruby on Rails <5.0.1 - Remote Code Execution
Ruby on Rails before version 5.0.1 is susceptible to remote code execution because it passes user parameters as local variables into partials. id: CVE-2020-8163 info: name: Ruby on Rails 5.0.1 - Remote Code Execution author: timkoopmans severity: high description: Ruby on Rails before version 5.0...
Kubio AI Page Builder <= 2.5.1 - Local File Inclusion
The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...
HuangDou UTCMS V9 - OS Command Injection
A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection.The attack may be launched remotely. The...
XWiki < 4.10.20 - Remote code execution
XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...
Jellyfin <10.7.0 - Local File Inclusion
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk. id: CVE-2021-21402 info: name: Jellyfin 10.7.0 - Local File Inclusion author: dwisiswant0 severity: medium...
WordPress AI Engine Plugin - Token Exposure
Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...
Grafana Post-Auth DuckDB - SQL Injection To File Read
The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...
CVE-2020-3452
このリポジトリには README がありません。...
jackson-CVE-2020-36180
このリポジトリには README がありません。...
CVE-2019-13144
このリポジトリには README がありません。...
CVE-Ubiquiti
CVE-Ubiquiti Vulnerabilidades de seguridad de Ubiquiti UniFi Este repositorio contiene información y recursos relacionados con las siguientes vulnerabilidades de seguridad de Ubiquiti UniFi: CVE-2026-77542 CVE-2026-77543 CVE-2026-77545 CVE-2026-77550 CVE-2026-77551 CVE-2026-77552 CVE-2026-77553...
CVE-2025-55182
Next.js CVE-2025-55182 – 自動スキャナー（Python） このリポジトリは、Next.js 16.0.6 に影響するセキュリティ脆弱性 CVE-2025-55182 のための 完全自動化された Python PoC スキャナー です。このツールは、セキュリティ研究者やバグ報奨金ハンターが、URL リストを提供するだけで複数のターゲットを大規模にテストできるようにします。 🚀 機能 100% Python 実装 Next.js 16.0.6 CVE-2025-55182 に特化して動作 urls.txt からターゲットを読み取り 自動的にエクスプロイトリクエストを送...
cve-2025-59934
cve-2025-59934 cve-2025-59934 PoC...
telnetd
telnetd ここで何をすればいいのか分からないので、後で編集しますが、これはtelnetdのCVE-2026-24061用です。...
CVE-2026-25857
https://nvd.nist.gov/vuln/detail/CVE-2026-25857...