341601 matches found
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...
CVE-2026-82423
A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...
citrix-logchecker
citrix-logchecker Analizza i log di Citrix Netscaler per rilevare segni di sfruttamento di CVE-2023-4966 Scritto da Otmar Lendl. Utilizzo: root@kitploit: ./citrix-anomaly.pl -d -v -h -p file -a X filedilog Questo script analizza i file syslog di Citrix Netscaler e cerca riconnessioni di sessione...
CVE-2020-17519
CVE-2020-17519 Strumento di Traversal dei Log Uno strumento Python che utilizza una tecnica di directory traversal per richiedere file di log da un URL di destinazione. Mostra l'avanzamento in tempo reale, supporta la configurazione del proxy e, opzionalmente, salva le risposte valide...
CVE-2019-19781-DFIR-Notes
Basierend auf einer Splunk -Perspektive. Die folgenden Ressourcen zeigen, dass die Aufnahme Ihrer Logs fĂźr eine ordnungsgemäĂe Analyse der Indicators of Compromise unerlässlich ist. Verschwende nie eine gute Krise... nimm alle Logs auf! Auswirkung / Grundursache: Remote-BefehlsausfĂźhrung vor...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers URIs in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An...
varlib-cve-2025-66034
Exploit fontTools varLib CVE-2025-66034 Questa repository non introduce una nuova vulnerabilità . Questo è un exploit proof-of-concept per CVE-2025-66034 che interessa la pipeline di generazione dei font variabili varLib di fontTools. La vulnerabilità consente a un attaccante di controllare il nom...
CVE-2025-1974
đ¨ Test di Iniezione di Log tramite Admission Controller di Ingress-NGINX đ§ Panoramica Questo script testa le vulnerabilitĂ di iniezione di annotazioni nei cluster Kubernetes utilizzando il NGINX Ingress Controller. Ă destinato solo a scopi di rilevamento in relazione a CVE-2025-1974, che consente...
fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers URIs in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers URIs in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An...
Exploit for CVE-2026-81578
Professional security research tool for PaperCut NG/MF vulne...
CVE-2024-6387
Articolo originale ripubblicato CVE-2024-6387 - PoC đ Descrizione Nota: questo script è un prototipo rapido di PoC, ci si possono aspettare alcuni errori e bug. Testato su: Kali Linux, ParrotSec, Ubuntu 22.04 VulnerabilitĂ di esecuzione di codice in remoto non autenticata nel server OpenSSH Ă sta...
CVE-2024-38063
CVE-2024-38063 - Ricerca sulla vulnerabilitĂ di esecuzione remota di codice in Windows TCP/IP Ricerca completa per farti risparmiare tempo, energia, sanitĂ mentale e comprensione. Voglio iniziare dicendo che questa specifica CVE, come molte altre, a causa del suo elevato punteggio di gravitĂ , ha...
CVE-2026-82364
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-82364 macrozheng mall Order Submission submit race condition
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-82364 macrozheng mall Order Submission submit race condition
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...
EUVD-2026-68092
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...