490244 matches found
linux-4.1.15_CVE-2022-3564
HiSax is a Linux hardware-level driver for passive ISDN cards with Siemens chipset ISACS 2085/2086/2186, HSCX SAB 82525. It is based on the Teles driver from Jan den Ouden. It is meant to be used with isdn4linux, an ISDN link-level module for Linux written by Fritz Elfert. This program is free...
external_expat-2.1.0_CVE-2022-43680
Expat ، الإصدار 2.1.0 هذه هي Expat ، مكتبة C لتحليل XML، كتبها جيمس كلارك. Expat محلل XML موجه نحو التدفق. وهذا يعني أنك تسجل معالجات مع المحلل قبل بدء التحليل. يتم استدعاء هذه المعالجات عندما يكتشف المحلل الهياكل المرتبطة في المستند الذي يتم تحليله. العلامة الافتتاحية هي مثال على نوع الهياكل الت...
log4shell-example
اختبار استغلال Log4Shell الهدف من هذا المشروع هو توضيح ثغرة الاستغلال log4j cve-2021-44228 في إعداد spring-boot، وإظهار كيفية إصلاحها. يحتوي هذا المشروع على ثلاث وحدات فرعية. واحدة منها تحتوي على كود ضعيف، والاثنتان الأخريان تم تصحيحهما. كيفية استخدام هذا المشروع قم بتشغيل ./mvnw clean test في جذ...
external_zlib_4.4_CVE-2018-25032
مكتبة ضغط البيانات ZLIB zlib 1.2.7 هي مكتبة ضغط بيانات للأغراض العامة. جميع الكود آمن للخيوط thread safe. تنسيق البيانات المستخدم من قبل مكتبة zlib موصوف في طلبات التعليقات RFCs 1950 إلى 1952 في الملفات http://tools.ietf.org/html/rfc1950 تنسيق zlib، rfc1951 تنسيق deflate و rfc1952 تنسيق gzip. جمي...
NextJS-Exploit-
NextSploit: Next.js CVE-2025-29927 स्कैनर और एक्सप्लॉइटर NextSploit एक कमांड-लाइन टूल है जो CVE-2025-29927 का पता लगाने और उसका शोषण करने के लिए डिज़ाइन किया गया है, जो Next.js में एक सुरक्षा दोष है। टूल पहले जाँचता है कि कोई लक्ष्य वेबसाइट Next.js चला रही है या नहीं और यह निर्धारित करता है कि उस...
MikroTik-RouterOS-6.49.18-Exploit-Kit
MikroTik-RouterOS-6.49.18-Exploit-Kit 📋 परियोजना सारांश MikroTik RouterOS 6.49.18 Exploit Kit 🎯 अवलोकन MikroTik RouterOS 6.49.18 उपकरणों को हैक करने के लिए एक पेशेवर और व्यापक परियोजना बनाई गई है जिसमें सभी आवश्यक घटक शामिल हैं, पूर्ण अरबी इंटरफ़ेस और विस्तृत दस्तावेज़ीकरण के साथ। ✅ पूर्ण किए गए...
CVE-2021-4044
SSL जाँचकर्ता स्क्रिप्ट इस रिपॉजिटरी में एक Python स्क्रिप्ट है जो आपके सिस्टम पर OpenSSL संस्करण की जाँच करती है और उपयोगकर्ता द्वारा प्रदान की गई वेबसाइट के लिए SSL/TLS कनेक्शन का परीक्षण करती है। स्क्रिप्ट यह पहचानने के लिए डिज़ाइन की गई है कि क्या सिस्टम CVE-2021-4044 से प्रभावित है और कनेक्श...
CVE-2019-19609
CVE-2019-19609 Strapi = 3.0.0-beta.17.8 प्रमाणीकृत दूरस्थ कोड निष्पादन...
DataEase - Remote Code Execution
DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...
IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection
IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. id: CVE-2019-4716 info: name: IBM Planning Analytics - Authentication Bypass & Remote...
VMware NSX SD-WAN Edge - Command Injection
VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...
Atom CMS v2.0 - SQL Injection
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...
n8n Webhooks - Remote Code Execution
n8n is an open source workflow automation platform. Versions starting with 1.65.0 and below 1.121.0 enable an attacker to access files on the underlying server through execution of certain form-based workflows. A vulnerable workflow could grant access to an unauthenticated remote attacker,...
Gradio - Server-Side Request Forgery
A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...
Apache Flink 1.5.1 - Local File Inclusion
Apache Flink 1.5.1 is vulnerable to local file inclusion because of a REST handler that allows file uploads to an arbitrary location on the local file system through a maliciously modified HTTP HEADER. id: CVE-2020-17518 info: name: Apache Flink 1.5.1 - Local File Inclusion author: pdteam severit...
XWiki - Open Redirect
XWiki Platform is vulnerable to open redirect attacks due to improper validation of the xredirect parameter. This allows an attacker to redirect users to an arbitrary website. The vulnerability is patched in versions 14.10.4 and 15.0. id: CVE-2023-32068 info: name: XWiki - Open Redirect author:...
LearnPress <= 4.2.5.7 - SQL Injection
The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
Jenkins build-metrics 1.3 - Cross-Site Scripting
Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...
XiongMai uc-httpd 1.0.0 - Buffer Overflow
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. id: CVE-2018-10088 info: name: XiongMai uc-httpd 1.0.0 - Buffer Overflow author: 0xAkoko severity: critical description: | Buffer overflow in XiongMai uc-httpd 1.0....