Directus < 11.9.0 - Version Disclosure

Directus versions from 9.0.0 before 11.9.0 expose the exact running version through the OpenAPI specification returned by the unauthenticated /server/specs/oas endpoint. The version is placed in the OpenAPI info.version field, letting an unauthenticated attacker fingerprint the precise Directus...

CVE-2020-9483

CVE-2020-9483 SQLインジェクション脆弱性のPoCCVE-2020-9483,Apache SkyWalking 使用方法:python3 CVE-2020-9483.py -ip 127.0.0.1 このスクリプトを使用して、SQLインジェクションによりデータベースのバージョンを取得できます。 このスクリプトが気に入ったらスターをクリックしてください。 このPoCが役に立ったと感じたら、スターを付けていただけると幸いです。 結果： XD...

CTF_CVE-2020-7471

DOBBYISFREE! CTF publicado: 2020 Christmas CTF Categoría: WEB Palabra clave: DOBBYISFREE! Dificultad: ★★★☆☆ Trasfondo Como normalmente los hackers web se centran en estudiar la inyección SQL contra mysql, creé este problema usando postgresql para que pudieran experimentar ataques contra diversas...

CVE-2023-35078

CVE-2023-35078 このスクリプトは、Ivanti EPMM APIの/pingエンドポイントにリクエストを送信することで、cve-2023-35078の存在を倫理的にチェックします。 /pingは、デバイスや管理者データを取得しようとするのではなく、単にVSPバージョンを返します。 使用方法: ./CVE-2023-35078 このスクリプトは、デフォルトポートでのHTTPS接続を前提としています。 セットアップ 仮想環境のセットアップ: python3 -m venv env 環境の有効化: source env/bin/activate 依存関係のインストール: pip3...

CVE-2025-47812

CVE-2025-47812 この検出方法はどのように機能しますか？ このNucleiテンプレートは、WebクライアントのHTMLレスポンスに含まれる7.4.4より古いバージョンを識別することで、CVE-2025-47812の影響を受けるWing FTP Serverインスタンスを検出します。 このスクリプトを実行するには？ 1. ここからNucleiをダウンロードします。 2. テンプレートをローカルシステムにコピーします。 3. 次のコマンドを実行します: nuclei -u https://yourHost.com -t template.yaml 参考文献...

CVE-2026-79777 rclone before v1.75.0 Information Disclosure via RC API

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

CVE-2026-27463

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has been fixed in version 3.2.3...

EUVD-2026-64124

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has been fixed in version 3.2.3...

CVE-2026-27463

Combodo iTop , a web-based IT service management tool, prior to version 3.2.3 , exposes the full application version in the HTML title attribute of the logo on the login page. This allows unauthenticated remote attackers to fingerprint the exact version, facilitating targeted exploitation of know...

CVE-2026-27463 Combodo iTop: Version disclosure via login page logo

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has been fixed in version 3.2.3...

CVE-2026-27463 Combodo iTop: Version disclosure via login page logo

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has been fixed in version 3.2.3...

CVE-2026-73290

RustFS prior to 1.0.0-beta.12 contains an anonymous ListObjectVersions bypass where a ListBucket check is used if no bucket-policy grant exists, skipping the policy_allowed path (deny_anonymous_table_data_plane_if_needed and RestrictPublicBuckets). This allows buckets that permit anonymous listin...

CVE-2026-19325

A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. This affects the function readMemoryBankFile/appendMemoryBankEntry of the file src/index.ts of the component readmemorybankfile/appendmemorybankentry...

CVE-2026-56578

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...

EUVD-2026-46341

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...

CVE-2026-56578

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...

CVE-2026-56578 HCL MyCloud was affected by Server Version Disclosure

HCL MyCloud was affected by Server Version Disclosure. It may help attackers identify and exploit known vulnerabilities affecting the disclosed software versions...

CVE-2026-56578

Technical details about CVE-2026-56578 are not provided in the supplied documents; monitor for updates as information on affected versions, impact, and fixes is not publicly available here.

CVE-2026-61454 Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__

The Grav Admin2 plugin getgrav/grav-plugin-admin2 before 2.0.4 embeds a global JavaScript variable window.GRAVCONFIG in the Admin2 SPA bootstrap page at /grav/admin and its subroutes. This object is returned in every unauthenticated response and discloses the server URL, API prefix, admin base...

CVE-2026-61454 Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__

The Grav Admin2 plugin getgrav/grav-plugin-admin2 before 2.0.4 embeds a global JavaScript variable window.GRAVCONFIG in the Admin2 SPA bootstrap page at /grav/admin and its subroutes. This object is returned in every unauthenticated response and discloses the server URL, API prefix, admin base...