87 matches found
CVE-2023-34233_Proof_OF_Concept
Snowflake Connector CVE-2025-24793 PoC 此仓库包含用于测试 Snowflake Connector for Python 中 CVE-2025-24793 漏洞的概念验证（PoC）代码。该项目包含已修补和未修补两个版本，以演示该漏洞及其修复方法。 前提条件 系统上已安装 Docker 具有适当权限的 Snowflake 账户 对 Docker 和 Snowflake 有基本了解 仓库结构 root@kitploit: ├── Dockerfile Docker configuration ├── requirements.txt Python...
CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17
CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...
CVE-2026-76369
In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is possible because Automation Broker log uploads accept crafted filename input before writing log files. For more information see...
MINI-3MC4-WMH9-HVCV
Bulletin has no description...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...
CVE-2026-19447 Stored XSS in Fileorbis Informatics's FileOrbis
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5...
PT-2026-76914
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal. This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 befo...
CVE-2026-74254
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75056
JetBrains IntelliJ IDEA before 2026.2.1 is vulnerable to remote code execution via the Markdown export tool; a malicious Markdown document can trigger code execution during export. CVSS 7.8 (HIGH) — local attack vector, low complexity, no privileges required, user interaction needed. Upgrade to 2...
MINI-CWXQ-HJ6X-23C8
Bulletin has no description...
CVE-2026-73194
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68370 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68370 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68425 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68107 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-13613 KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint
The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection...
PT-2026-69430
Name of the Vulnerable Software and Affected Versions Apache Ranger versions prior to 2.9.0 Description Remote Code Execution is possible through arbitrary class instantiation within the plugin-schema-registry component. Arbitrary class instantiation occurs when an application creates an instance...