Dgraph <= 25.3.2 - Admin Token Disclosure

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

GetSimple CMS 3.3.13 - Open Redirect

GetSimple CMS 3.3.13 contains an open redirect vulnerability via the admin/index.php redirect parameter. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-9915 info: name: GetSimple CMS...

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA = 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands id: CVE-2026-28409 info: name: WeGIA = 3.6.4 - Remote Code Execution author:...

Microweber < 1.2.17 - Cross-Site Scripting

Cross-site Scripting XSS vulnerability in the /demo/editortools/module endpoint via the 'type' parameter. id: CVE-2022-2130 info: name: Microweber 1.2.17 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS vulnerability in the...

Sony IPELA Engine IP Camera - Hardcoded Account

Multiple SONY network cameras are vulnerable to sensitive information disclosure via hardcoded credentials. id: CVE-2016-7834 info: name: Sony IPELA Engine IP Camera - Hardcoded Account author: af001 severity: high description: | Multiple SONY network cameras are vulnerable to sensitive informati...

h2csmuggler

h2cSmuggler 説明 h2cSmugglerは、安全でないエッジサーバーのproxypass設定を利用して、h2c対応のバックエンドサーバーとのHTTP/2クリアテキスト（h2c）通信を確立し、プロキシルールやアクセス制御をバイパスしてHTTPトラフィックを密輸します。 以下に詳細な記事をご覧ください： 脆弱性の技術的詳細 デフォルトで安全でないサービス 修正ガイダンス こちら: https://labs.bishopfox.com/tech-blog/h2c-smuggling-request-smuggling-via-http/2-cleartext-h2c テスト方法？...

wordpress-upgrade-check

wordpress-upgrade-check サーバー上のすべてのサイトの WordPress コアバージョン を読み取り専用でチェックし、CVE-2026-87902 （重大、認証不要、2026-09-22 に WordPress 7.1.2 で修正され、4.7 までのすべてのブランチにバックポート済み）の修正テーブルを提供します。 多くの WordPress サイトを管理する Web 制作会社や管理者向け：ホスティングアカウント全体で一度実行するだけで、1 つのリストが得られます。 日本語は下にあります bash check.sh /publichtml every WordPre...

cve-2018-1002105

これは https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/ から修正されたものです。すべての功績はGravitationalの親切な人々に帰属します。 元のPoCコードは、脆弱性をチェックするだけを超えて、最初のnamespace内の最初のcontainer内でコマンドを実際に実行するように変更されました。この場合、ほとんどのクラスターのデフォルトnamespace内の最初のpod/container内で curl -s google.com...

CVE-2020-7693

CVE-2020-7693 Poc 注記: CVE-2020-7693 のペイロードがバグバウンティプログラムで実行可能であることを確認しました 説明: Upgrade ヘッダーの値 websocket の不適切な処理により、sockjs アプリケーションをホストするコンテナがクラッシュします。これは sockjs パッケージ 0.3.20 未満に影響します。 単一リクエストが古い sockjs-node を介してサーバーをクラッシュさせる: リクエスト GET /sockjs-node/000/ HTTP/1.1 Host: localhost:3000 User-Agent:...

cve-2022-42889-jmeter

CVE 2022-42889 この スクリプトは、Apache Commons Text 1.9 の旧バージョンを削除し、それ を JMETERHOME/lib フォルダ内の新しいバージョン 1.10.0 に置き換えるためのものです。...

Adminer <4.7.9 - Server-Side Request Forgery

Adminer before 4.7.9 is susceptible to server-side request forgery due to exposure of sensitive information in error messages. Users of Adminer versions bundling all drivers, e.g. adminer.php, are affected. An attacker can possibly obtain this information, modify data, and/or execute unauthorized...

CouchCMS <= 2.0 - Path Disclosure

CouchCMS = 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php. id: CVE-2018-7662 info: name: CouchCMS = 2.0 - Path Disclosure author: ritikchaddha severity: medium description: CouchCMS = 2.0 allows...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

Ruby Dragonfly <1.4.0 - Remote Code Execution

Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishand...

Essential Blocks < 4.4.3 - Local File Inclusion

Wordpress Essential Blocks plugin prior to 4.4.3 was discovered to be vulnerable to a significant Local File Inclusion vulnerability that may be exploited by any attacker, regardless of whether they have an account on the site. id: CVE-2023-6623 info: name: Essential Blocks 4.4.3 - Local File...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

Apache ShenYu Admin JWT - Authentication Bypass

Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. id: CVE-2021-37580 info: name: Apache ShenYu Admin JWT - Authentication Bypass author: pdteam severity: critical descriptio...

Suprema BioStar <2.8.2 - Local File Inclusion

Suprema BioStar before 2.8.2 Video Extension allows remote attackers can read arbitrary files from the server via local file inclusion. id: CVE-2020-15050 info: name: Suprema BioStar 2.8.2 - Local File Inclusion author: gy741 severity: high description: Suprema BioStar before 2.8.2 Video Extensio...

Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...