CVE-2026-106554

Two CBOR-parsing issues in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time "TagList" growth CPU/GC-exhaustion DoS, PoC-proven, and the configured "StreamReadConstraints.maxStringLength" limit is not enforced for CBOR text-string values a...

CVE-2023-5268

A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtmltaglistaction.php. The manipulation of the argument mktime leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

PT-2023-31989

Name of the Vulnerable Software and Affected Versions DedeBIZ version 6.2 Description A critical issue affects some unknown processing of the file /src/admin/makehtml taglist action.php. The manipulation of the argument mktime leads to SQL injection. The attack may be initiated remotely...

Espcms v5.0 /index.php SQL注入漏洞

构造www.xxx.cc/index.php?ac=search&at=taglist&tagkey=%2527,tags orselect 1 fromselect count,concatselect select concat0x7e,0x27,tablename,0x27,0x7e from informationschema.tables where tableschema=database limit 0,1,floorrand02x from informationschema.tables group by xa%23...

esp cms injection 0day-vulnerability warning-the black bar safety net

In urldecode the role of the non-filtered result in injection form interface/search.php ---- intaglist ---- $tagkey（ Urldecdoe after processing directly into SQL statement, the injection formedcode omitted Test: http://localhost/espcms/index.php?ac=search&at=taglist&tagkey=dd%2 5 2 7,%2527dd%2 5 ...