CVE-2014-0472

CVE-2014-0472 Usa root@kitploit: docker-compose up -d Accedi a localhost:8083 Riferimento: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. Sono presenti una o più viste che costruiscono un URL basato sull'input dell'utente comunemente, un parametro "next" in una querystring che indi...

Push Notification for Post and BuddyPress <= 1.93 - SQL Injection

Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to SQL Injection via the 'onesignalexternalid' and 'onesignalgetsubscriptionoptionsid' paramters in all versions up to, and including, 1.93 due to insufficient escaping on the user supplied parameter and lack of sufficie...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

WordPress AnyComment <0.3.5 - Open Redirect

WordPress AnyComment plugin before 0.3.5 contains an open redirect vulnerability via an API endpoint which passes user input via the redirect parameter to the wpredirect function without being validated. An attacker can redirect a user to a malicious site and possibly obtain sensitive information...

IBAX - SQL Injection

IBAX go-ibax functionality is susceptible to SQL injection via the file /api/v2/open/rowsInfo. The manipulation of the argument tablename leads to SQL injection, and the attack may be launched remotely. An attacker can potentially obtain sensitive information, modify data, and/or execute...

Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)

Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via Post content. id: CVE-2022-42096 info: name: Backdrop CMS version 1.23.0 - Cross Site Scripting Stored author: theamanrawat severity: medium description: | Backdrop CMS version 1.23.0 was...

Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript...

WWBN AVideo 11.6 - Cross-Site Scripting

A reflected XSS vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff, allowing arbitrary Javascript execution. id: CVE-2023-48728 info: name: WWBN AVideo 11.6 - Cross-Site Scripting author: ritikchaddha severity: medium...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...

GamiPress <= 2.8.9 - SQL Injection

GamiPress WordPress plugin version 2.8.9 and below suffers from an SQL injection vulnerability due to insufficient sanitization of user input, allowing attackers to execute arbitrary SQL commands. id: CVE-2024-13496 info: name: GamiPress = 2.8.9 - SQL Injection author: ritikchaddha severity: high...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS plugin WordPress - tutorial CalderaForm é um plugin para WordPress que permite criar facilmente formulários através de drag and drop. Durante uma atividade recente, testei alguns portais, um dos quais hospedava exatamente um formulário de contato criado...

cve-2020-7247

cve-2020-7247 एक्सप्लॉइट शीर्षक: OpenSMTPD 6.6.2 - रिमोट कोड निष्पादन। नई तिथि: 2020-01-29। एक्सप्लॉइट लेखक: 1F98D। मूल लेखक: Qualys Security Advisory। विक्रेता होमपेज: https://www.opensmtpd.org/। सॉफ्टवेयर लिंक: https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1। संस्करण: OpenSMTPD 6.6....

CVE-2019-1698

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Giorno iniziato: 30/07/2024 Controlla il diff del codice tra la versione vulnerabile e la versione con fix: Riferimento codice 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php...

EUVD-2026-67171

Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service DoS attack. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framewo...

CVE-2020-5398

CVE-2020-5398 - Attacco RFD Reflected File Download per Spring MVC In Spring Framework, le versioni 5.2.x precedenti alla 5.2.3, le versioni 5.1.x precedenti alla 5.1.13 e le versioni 5.0.x precedenti alla 5.0.16 rendono un'applicazione vulnerabile a un attacco di tipo reflected file download RFD...

CVE-2026-47877

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...

PuneethReddyHC Online Shopping System homeaction.php SQL Injection

An unauthenticated SQL injection vulnerability exists in PuneethReddyHC Online Shopping System through the /homeaction.php catid parameter. Using a post request does not sanitize the user input. id: CVE-2021-41649 info: name: PuneethReddyHC Online Shopping System homeaction.php SQL Injection...

Log4j_Vulnerability_Demo

Log4jVulnerabilityDemo Ein einfaches Programm zur Demonstration, wie die Log4j-Schwachstelle ausgenutzt werden kann CVE-2021-44228 Ausführen der Demo : Um das Programm zu starten, führen Sie einfach start.sh auf UNIX-Systemen oder start.bat unter Windows aus. Die Benutzereingabe wird gelesen und...

CVE-2025-50565

CVE-2025-50565 Descrizione Doubo ERP 1.0 presenta una vulnerabilità di SQL injection dovuta alla mancanza di filtraggio dell'input utente, che può essere sfruttata da remoto da un attaccante. Tipo di vulnerabilità SQL Injection Tipo di attacco Remoto Impatto divulgazione di informazioni true Vend...