shARP

|| || /\ | ? | ? || / \ | ? | ? || / \ | ? | ? // ||------- / \ |? |? // || || /--------\ | \ | // || || / \ | \ | // || || / \ | \ | // || || / \ | \ | // || || / \ | \ | Description- ARP spoofing allows an attacker to intercept data frames on a network, modify the traffic, or stop all traffic...

Sharp-SMBExec

Sharp-SMBExec A native C conversion of Kevin Robertsons Invoke-SMBExec powershell script. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Built for .NET 3.5 Usage Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld" target:"target.domain.tld"...

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

Sharp Multifunction Printers - Cookie Exposure

It was observed that Sharp printers are vulnerable to a listing of session cookies without authentication. Any attacker can list valid cookies by visiting a backdoor webpage and use them to authenticate to the printers. id: CVE-2024-33610 info: name: Sharp Multifunction Printers - Cookie Exposure...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

CVE-2026-41551

Воспроизведение CVE-2026-41551 Уязвимость: обход относительного пути в сервисах fileserver / fileserver2 Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Затронутые версии: все версии ros-sharp name.substr10; // удаляем "package://" std::string package = address.substr...

CVE-2026-63563

CVE-2026-63563 - Неавторизованное изменение адресной книги на многофункциональных принтерах Sharp MX/BP Консультация производителя: Sharp Product Security Advisory 2026-004 опубликовано 31 июля 2026 г. Краткое описание Многофункциональные принтеры серий Sharp MX/BP предоставляют доступ к адресной...

CVE-2024-58388

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

CVE-2024-58388

Sharp and Toshiba Tec rebranded multifunction printers are vulnerable to an unauthenticated local file inclusion (LFI) vulnerability. The root cause is the lack of input validation on the path parameter within the installed_emanual_down.html endpoint. Remote attackers can leverage directory trave...

EUVD-2024-55780

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

CVE-2024-58388 Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

libheif-grid-nextjs-rce

libheif grid-to-GOT Next.js RCE Рабочий proof of concept, который превращает CVE-2026-32740 в жёстко закодированном стеке изображений Next.js/sharp в запись по выбранному адресу и подтверждённый обратный вызов /usr/bin/id. Это приватный исследовательский репозиторий Fortbridge. Используйте его...

PT-2026-103873

Name of the Vulnerable Software and Affected Versions Sharp and Toshiba Tec rebranded multifunction printers affected versions not specified Description An unauthenticated local file inclusion issue exists, allowing remote attackers to read arbitrary files. By manipulating the path parameter in t...

VulnCheck KEV: CVE-2024-58388

Sharp and Toshiba Tec rebranded multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manipulating the path parameter in the installedemanualdown.html endpoint. Attackers can supply directory traversal sequence...

CVE-2026-94545

CVE-2026-94545 Неаутентифицированное RCE в Next.js next/og ★ CVE-2026-94545 Next.js next/og инъекция SVG в нативное RCE ★ https://github.com/user-attachments/assets/e297b40b-36ad-4a9a-b0c1-a64429bc0160 Обзор next/og создаёт изображения Open Graph, рендеря JSX в SVG с помощью Satori, а затем...

GHSA-QXG3-46RW-79J8 code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

Impact A Stored Cross-Site Scripting XSS vulnerability exists in the rich text editor due to improper sanitization of the srcdoc attribute on elements. While the underlying Symfony HtmlSanitizer correctly HTML-encodes special characters inside the attribute value e.g., converting to script, the...

EUVD-2026-86390

code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute...

code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

Impact A Stored Cross-Site Scripting XSS vulnerability exists in the rich text editor due to improper sanitization of the srcdoc attribute on elements. While the underlying Symfony HtmlSanitizer correctly HTML-encodes special characters inside the attribute value e.g., converting to script, the...

EUVD-2026-86384

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass...

code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

Impact The vulnerability allows an attacker to bypass the HTML sanitizer by using the data-html-content attribute in the content of a SharpEditorFormField. Patches The field must now explicitly configure SharpFormEditorField::RAWHTML in the toolbar to keep this behavior. When using the RAWHTML...