CVE-2022-35914-RCE

CVE-2022-35914 by cyb3rk0ala 针对 CVE-2022-35914 的 PoC，这是一个涉及存在漏洞的 GLPI 安装中 htmLawed 测试组件的命令注入漏洞。 该工具通过存在漏洞的端点提供命令执行功能，并包含用于授权实验环境的可选回调功能。 免责声明： 本项目仅供授权安全测试、CTF、OffSec/PG 实验环境以及教育目的使用。请勿在未经明确授权的系统上使用。 漏洞 字段| 详情 ---|--- CVE| CVE-2022-35914 软件| GLPI v.10.0.2 组件| htmLawed 存在漏洞的端点|...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2024-51430

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

The vulnerability of the vaddr-test component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vaddr-test component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

Code Injection

nuxt is vulnerable to Code Injection. The vulnerability exists due to a lack of user input path validation in test-component-wrapper.ts which allows an attacker to inject and execute malicious code. Note that this vulnerability is only applicable if the server is ran on dev mode...

Malicious Package

Overview dash-generator-test-component-standard is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

CVE-2020-5976

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2020-5976: Undefined Security Weakness

NVIDIA GeForce NOW, versions prior to 2.0.23 Windows, macOS and versions prior to 5.31 Android, Shield TV, contains a vulnerability in the application software where the network test component transmits sensitive information insecurely, which may lead to information disclosure...

CVE-2010-2276: Undefined Security Weakness

The default configuration of the build process in Dojo 0.4.x before 0.4.4, 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 has the copyTests=true and mini=false options, which makes it easier for remote attackers to have an unspecified impact...