298232 matches found
CVE-2023-36085_SISQUALWFM-Host-Header-Injection
CVE-2023-36085 SISQUALWFM 호스트 헤더 주입 취약점 이 저장소에는 SISQUALWFM 버전 7.1.319.103에서 발견된 호스트 헤더 주입 취약점과 관련된 정보가 포함되어 있으며, 이 취약점으로 인해 공격자가 웹페이지 링크를 조작하거나 사용자를 악성 사이트로 리디렉션할 수 있습니다. 이 취약점에는 CVE-2023-36085가 할당되었으며 버전 7.1.319.111 이상에서 수정되었습니다. 취약점 세부 정보 익스플로잇 제목: SISQUALWFM 7.1.319.103 호스트 헤더 주입 발견 날짜:...
CVE-2026-105314
Papermerge 3.5.3 is vulnerable to remote code execution (RCE) due to a directory traversal flaw in the /api/documents/upload endpoint. A standard user can exploit this to write a Python .pth file into the site-packages directory. The malicious code within the .pth file is executed automatically d...
CVE-2026-7458
🧨 CVE-2026-7458 – PickPlugins User Verification OTP 우회 OTP 검증 REST API의 느슨한 비교를 통한 비인증 인증 우회 PickPlugins User Verification ≤ 2.0.46 📖 설명 WordPress용 PickPlugins의 User Verification 플러그인버전 ≤ 2.0.46에는 OTP 로그인 메커니즘에 심각한 취약점이 있습니다. 검증 로직의 느슨한 비교== 때문에, 인증되지 않은 공격자는 숫자 OTP 값 대신 불리언 true를 보내 OTP 인증을 우회할 ...
Exploit-CVE-2011-2523
README : VSFTP 2.3.4 취약점 익스플로잇 이 Python 스크립트는 VSFTP 2.3.4 버전에 있는 백도어 취약점을 익스플로잇하기 위해 설계되었습니다. 이 익스플로잇은 해당 VSFTP 버전을 실행 중인 시스템에 대한 무단 접근을 허용합니다. 사용법 이 익스플로잇 스크립트를 사용하려면 다음 단계를 따르십시오: 리포지토리 복제: 익스플로잇 스크립트가 포함된 리포지토리를 로컬 머신에 복제하십시오. 종속성 설치: 필요한 종속성이 설치되어 있는지 확인하십시오. 이 스크립트는 pwn 라이브러리를 사용합니다. pip를 사용...
CVE-2026-105302
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-36227
CVE-2026-36227: Easy Chat Server 3.1 UserName 경로 탐색 PoC 이 저장소는 Easy Chat Server 3.1 사용자 등록 처리에서 발생하는 경로 탐색 문제인 CVE-2026-36227에 대한 무해한 개념 증명을 포함합니다. 이 저장소는 승인된 보안 연구 및 로컬 재현 전용입니다. 소유하지 않았거나 명시적 테스트 권한이 없는 시스템에 사용하지 마십시오. 요약 Easy Chat Server 3.1은 POST /registresult.htm을 통해 등록 데이터를 수락합니다. UserName...
CVE-2025-27893
CVE-2025-27893: Archer Platform의 가정된 불변 웹 매개변수 외부 제어 설명 Archer Platform 6부터 6.14.00202.10024까지에서, 레코드 생성 권한이 있는 인증된 사용자는 GenericContent/Record.aspx?id= URI를 통한 Copy 요청을 가로채고 수정하여 생성 날짜와 같은 불변 필드를 조작할 수 있습니다. 이로 인해 시스템 생성 메타데이터의 무단 수정이 가능해지며, 데이터 무결성이 손상되고 감사, 규정 준수 및 보안 통제에 영향을 미칠 수 있습니다. 영향을 받는 ...
EUVD-2026-92257
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302
A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...
CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105302
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...
CVE-2026-105229
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2025-65271
CVE-2025-65271 PoC для CVE-2025-65271 Как запустить? node server.js Описание Внедрение шаблонов на стороне клиента CSTI в панели администратора Azuriom CMS позволяет пользователю с низкими привилегиями выполнять произвольный код шаблона в контексте сеанса администратора. Это может происходить чер...
CVE-2025-4334
CVE-2025-4334 - Simple User Registration --form Аргументы: -u / --url → Базовый URL WordPress например, https://target.com/wordpress/ --form → Полный URL формы регистрации например, https://target.com/wpr/default-registration/ Пример: python3 CVE-2025-4334.py -u https://example.com/wordpress --fo...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
EUVD-2026-92251
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...
CVE-2026-105229
A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...
CVE-2026-105229 kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection
A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...