194 matches found
CVE-2024-45058
CVE-2024-45058 CVE-2024-45058의 PoC입니다. 이 취약점은 Broken Access Control로, 사용자 구성 섹션에서 보기 권한이 있는 사용자가 자신의 사용자 유형을 변경하여 관리자가 될 수 있습니다. 원하는 nivelusuario ID를 가져와서 익스플로잇을 실행하세요. 사용법 usage: CVE-2024-45058.py -h -t TARGET -u USERNAME -p PASSWORD -i ID CVE-2024-45058 exploit options: -h, --help show this hel...
CVE-2021-40223
CVE-2021-40223 애플리케이션 : Rittal CMC PU III 웹 관리 장치 : CMC PU III 7030.000 소프트웨어 개정판 : V3.11.002 하드웨어 개정판 : V3.00 공격 유형 : 저장형 XSS 해결 방법 : 소프트웨어 개정판 V3.17.10 이상으로 업데이트 요약 : 웹 애플리케이션이 보안 사용자 구성 대화상자 및 작업 탭에서 사용자 입력을 삭제sanitize하지 못합니다. 이로 인해 공격자는 웹 애플리케이션에 HTML 또는 브라우저 해석 콘텐츠를 주입할 수 있습니다. 이 경우 사용자 구성의...
EUVD-2026-54719
Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...
PT-2026-65872
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.0 through 19.0.4 GitLab CE/EE versions 19.1 through 19.1.2 GitLab CE/EE versions 19.2 through 19.2.0 Description An issue exists in the Pipeline Schedule API where improper validation of user-supplied attributes when...
CVE-2026-44187
A flaw was found in the Ansible Lightspeed extension for Visual Studio Code. This vulnerability allows an attacker with local access to the workstation, or malware running with the user's privileges, to read the Google Gemini API key. The extension insecurely stores the API key in plain text with...
SSH Configuration Injection
Coder is vulnerable to SSH Configuration Injection. The vulnerability is due to coder config-ssh writing server-supplied HostnameSuffix and SSHConfigOptions into the user's /.ssh/config without properly sanitizing embedded newlines or restricting SSH directives, which allows an attacker controlli...
CVE-2026-14868
The encryption algorithm used to protect the configuration of user accounts, stored in the built-in user directory of PcVue projects, all versions prior to 17.0.0, is not strong enough for the level of protection required. A local attacker could alter the existing configuration and ultimately gai...
Prototype Pollution
Overview jodit is a Jodit is awesome and usefully wysiwyg editor with filebrowser Affected versions of this package are vulnerable to Prototype Pollution via the ConfigMerge and ConfigProto helpers in the configuration code. An attacker can mutate Object.prototype by supplying user-controlled...
EUVD-2026-37974
The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the useradminsimplifieroptionspage function. This makes it possible for unauthenticated attackers to rese...
CVE-2026-25041
Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-controlled configuration values database name, host, password, etc. without proper sanitization. The password and other...
PT-2026-24106
Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.23.22 and earlier, the PostgreSQL integration constructs shell commands using user-controlled configuration values database name, host, password, etc. without proper sanitization. The password and other...
Podman Vulnerable to Arbitrary File Write via Symbolic Link Traversal in 'play.go' File
Podman contains a symbolic link traversal vulnerability when the kube play command is used with a 'ConfigMap' or secret volume mount. A remote attacker could exploit this by creating a malicious symbolic link on the volume in order to overwrite the contents of arbitrary files, however the attacke...
Craft CMS 安全漏洞
Craft CMS is an open-source content management system developed by Craft CMS. Versions 4.0.0-RC1 to 4.16.17, and 5.0.0-RC1 to 5.8.21 of Craft CMS have security vulnerabilities. These vulnerabilities stem from the assembleLayoutFromPost function not properly cleaning user configuration data, which...
CVE-2020-36995: Buffer Copy without Checking Size of Input
Mocha Telnet Lite for iOS 4.2 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the user configuration input. Attackers can overwrite the 'User' field with 350 bytes of repeated characters to trigger an application crash and prevent normal...
Mocha Telnet Lite security vulnerabilities
Mocha Telnet Lite is an open-source terminal emulation tool developed by Mocha. Version 4.2 of Mocha Telnet Lite contains a security vulnerability, which stems from improper handling of user configuration inputs, potentially leading to application crashes...
CVE-2026-22993
In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is up. If an ethtool command that accesses the rss lut is attempted immediately after reset, it will...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002595)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002595 advisory. An issue was discovered in the Linux kernel before 4.19.3. cryptoreportone and related functions in crypto/cryptouser.c the crypto user configuration API do not full...
CVE-2022-50927
Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricte...
CVE-2022-50927
Cyclades Serial Console Server 3.3.0 contains a local privilege escalation vulnerability due to overly permissive sudo privileges for the admin user and admin group. Attackers can exploit the default user configuration to gain root access by manipulating system binaries and leveraging unrestricte...