79333 matches found
CVE-2025-68434-OSPOS-CSRF
CVE-2025-68434: CSRF Unauthorized Administrator Creation in OpenSourcePOS Metadata| Details ---|--- CVE ID| CVE-2025-68434 Severity| Critical 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vulnerability Type| Cross-Site Request Forgery CWE-352 Affected Versions| OpenSourcePOS v3.4.0, v3.4.1...
DBScanner
DBScanner Unauthorized access + weak password batch detection Automatically scan common SQL and No-SQL database scripts on the internal network mysql, mssql, oracle, postgresql, redis, mongodb, memcached, elasticsearch, including unauthorized access and common weak password detection Runs in a...
CVE-2024-24919
EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...
CVE-2023-2516
CVE-2023-2516: Stored XSS Vulnerability in Teampass 3.0.6 - M Nadeem Qazi Hey everyone, I wanted to share with you a vulnerability that I discovered in Teampass, a password management software. I found a stored XSS vulnerability CVE-2023-2516 that allows attackers to inject malicious code into...
CVE-2020-1938
声明：所有网络安全工具的使用必须遵守国家法律法规、行业规范及目标系统的相关规定，不得用于任何非法或侵犯他人合法权益的用途。 使用者应认识到，任何工具均无法保证绝对安全，不当使用可能导致法律风险、技术反制或数据污染。使用者需自行承担因违反本声明及相关规定而产生的全部责任。 要求：python3 运行： python CVE-2020-1938.py your-ip -p 8009 -f WEB-INF/web.xml...
CVE-2021-41822
CVE-2021-41822（水的一个） Canon printer unauthorized access vulnerability and denial of service vulnerability The attacker does not need an account or password to access the printer page and obtain information about printed files. And the printer can be turned off remotely. Create denial of service...
CVE-2022-46463
CVE-2022-46463 CVE-2022-46463POC Harbor no autorizado Los detalles de la vulnerabilidad están disponibles en Stack社区 Uso root@kitploit: python3 cvve-2022-46463.py -u https://127.0.0.1:5003 Opciones root@kitploit: -u URL, --url URL URL objetivo p. ej. http://example.com -h, --help Mostrar mensaje ...
CVE-2026-66302
CVE-2026-66302 is a CRITICAL vulnerability (CVSS 9.8) in Skype for Business Server caused by external control of file name or path , allowing an unauthorized attacker to achieve remote code execution over the network with no privileges or user interaction. Affected products include Skype for Busi...
CVE-2026-83951
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-81394
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-81380
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-80088
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-80089
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
CVE-2026-80079
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-78524
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network...
CVE-2026-78526
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-78519
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-78509
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...