17372 matches found
CVE-2021-27905.POC
CVE-2021-27905.POC 与 CVE-2021-27905 相关的 LFI 的 POC 用于 apache-solr-file-read nuclei 模板 的 POC 使用 traverse.sh path 例如，使用 /root 作为路径，将递归地显示所有文件的内容 ./traverse.sh /root 也可以遍历并获取服务器上每个文件的内容（显然需要读取权限） ./traverse.sh / 文档 易受攻击的 solr 实例的响应会返回一个 status code，其中值得关注的值有： status: 0 - OK status: 500 -...
CVE-2026-87902
CVE-2026-87902 — WordPress Core Path Traversal / LFI / RCE Inclusión Local de Archivos no autenticada mediante path traversal con doble codificación en el resolvedor de plantillas de página del núcleo de WordPress, con cadena de RCE basada en PEAR. Detalles de la Vulnerabilidad Campo| Valor ---|-...
Detections-CVE-2026-31431
迁移至：https://github.com/insomnisec/publiccvedetections 为更好地长期管理检测发布内容 本仓库将于2026年6月移除 后续请使用另一仓库 CVE-2026-31431 "复制失败" — 检测与响应包 发布日期： 2026-04-30 CVSSv3： 7.8（高危） 类型： 本地权限提升（LPE） 子系统： Linux 内核 algifaead / authencesn 加密模板 影响范围： Linux 内核 4.14 – 6.18.21（几乎自 2017 年以来的所有发行版） 参考资料： Xint/Theori 分析文章 官方 PoC...
CVE-2026-100280
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
CVE-2026-100274
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100272
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CrushFTP-SSTI-LFI-Proof-of-Concept
CVE-2024-4040 — CrushFTP SSTI / LFI 概念验证 仅供教育和授权实验室环境使用。 CS443 软件与系统安全 — 受控本地 Docker 环境。 漏洞摘要 字段| 详情 ---|--- CVE| CVE-2024-4040 受影响软件| CrushFTP …），服务器评估并返回这些载荷，从而实现跨主机任意文件读取。 实验室环境 组件| 值 ---|--- 目标| http://localhost:8080 基础 PoC CrushFTP 版本| 10.3.0（故意存在漏洞） 缓解方案 3 测试环境| 运行 CrushFTP 11.x（已修补分支）的独立容器...
EUVD-2026-90024
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
CVE-2026-100280
In JetBrains YouTrack versions prior to 2026.2.19197 , a vulnerability exists that allows the creation of a project from an unreadable custom template . This issue is associated with a Missing Authorization flaw (CWE-862). No specific exploit details or remediation instructions are provided in th...
CVE-2026-100280
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible...
CVE-2026-100274
In JetBrains YouTrack versions prior to 2026.2.19197 , a project Admin can trigger a Denial of Service (DoS) condition. The root cause involves the use of a notification template . The CVSS v3.1 score is 6.5 (MEDIUM) , with a high impact on availability via a network vector requiring low privileg...
CVE-2026-100274
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
EUVD-2026-90018
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...
CVE-2026-100272
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2026-100272
In JetBrains YouTrack versions before 2026.2.19197 , a lack of missing authorisation in the notification template preview feature allows Project Administrators to read restricted issues . The impact is categorized as High for confidentiality. Remediation is available in version 2026.2.19197 or la...
EUVD-2026-90016
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...
CVE-2022-22954
CVE-2022-22954 PoC VMware Workspace ONE Access 和 Identity Manager 通过 SSTI 的远程代码执行漏洞。 CVE-2022-22954 - SSTI 概念验证 用法： CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help 显示此帮助信息并退出 -m SETMODE, --mode SETMODE 可选模式：shodan | file | manual -i IP, --ip IP 主机 IP 地址 -c CMD, --cmd C...
CVE-2026-96824
Editor Arbitrary File Deletion in Template Kit – Import = 1.0.16 versions...
ROOT-APP-MAVEN-CVE-2026-34481 CVE-2026-34481 in org.apache.logging.log4j:log4j-layout-template-json - Patched by Root
Root has patched CVE-2026-34481 in the org.apache.logging.log4j:log4j-layout-template-json package for Root:Maven. Multiple fixed versions available...