CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 — это критическая уязвимость удаленного выполнения кода в Microsoft Outlook версии, включая Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 до патча февраля 2024 года. Она позволяет неаутентифицированному злоумышленнику обойти защищенный просмотр Outlook, отправив специальн...

PoC_CVE-2016-2098_Rails42

CVE-2016-2098의 PoC rails 4.2.5.1 뷰에 취약한 코드가 있습니다 app/views/poc/render1.html.erb 다음 명령은 원격 코드 실행을 유발합니다 $ curl ':3000/poc/render1?template\inline='...

cve-2025-9933

🔒 Учетные данные для панели администратора Имя пользователя: admin Пароль: Test@123 Имя пользователя: [email protected] Пароль: Test@123 Или зарегистрируйте нового пользователя. Описание Уязвимость обнаружена в PHPGurukul Beauty Parlour Management System 1.1. Указанной проблемой затронута...

CVE-2021-21978

CVE-2021-21978 Version avec retour d'affichage du script d'exploitation, plus simple 0. Informations sur la vulnérabilité L'interface d'administration Web de VMware View Planner comporte un point d'entrée pour le téléchargement de fichiers de fonctionnalités de logs, sans authentification et le...

kygocera

kygocera CVE-2022-1026 Улучшенная Golang-версия PoC от Rapid7 для CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ благодарности Aaron Herndon / https://twitter.com/ac3lives приветы https://github.com/D4RKMATT3R CVE-2022-1026 установк...

BIT-AUTHENTIK-2026-94611 authentik: Stored credentials are readable with view permission alone

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...

CLEANSTART-2024-QU11839 Use after free in Guest View in Google Chrome prior to 103

Security vulnerability affects the chromium package. Use after free in Guest View in Google Chrome prior to 103...

bom-view

Vue BOM Une application web statique simple pour afficher les dépendances logicielles à partir de fichiers de nomenclature logicielle SBOM. Étant un site statique, elle peut être facilement hébergée sur n'importe quel service d'hébergement web statique, comme GitLab Pages, GitHub Pages ou Netlify...

Rocky Linux 9 [CIQ] Security Update: pgaudit / pgaudit-debuginfo / pgaudit-debugsource / etc (crlsa-2024_0950)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240950 advisory. postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 Tenable has extracted the preceding description block directly...

Rocky Linux 9 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (crlsa-2024_0951)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240951 advisory. postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 Tenable has extracted the preceding description block directly...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1743011981)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1743011981 advisory. - IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or...

Rocky Linux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1769021453)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769021453 advisory. - MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc (crlsa-2024_0975)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240975 advisory. postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 Tenable has extracted the preceding description block directly...

AlmaLinux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1769021453)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769021453 advisory. - MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

Moniker-Link--CVE-2024-21413-

🔗 Lien Moniker CVE-2024-21413 — Guide pratique de la vulnérabilité Zero-Click d'Outlook 📌 1. Introduction CVE-2024-21413 , communément appelée la vulnérabilité du lien Moniker , est une faille de sécurité critique dans Microsoft Outlook qui permet aux attaquants de divulguer les identifiants...

CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

UBUNTU-CVE-2026-102578

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...

cve-2024-21413-outlook-monikerlink-lab

CVE-2024-21413 — Outlook Moniker Link Лаборатория / PoC Учебные лабораторные заметки и небольшой Proof of Concept PoC, демонстрирующий ход атаки CVE-2024-21413 в контролируемой среде лаборатория в стиле TryHackMe. ⚠️ Только в образовательных целях. Не используйте против систем, которыми вы не...

CVE-2026-102578

A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...

EUVD-2026-89717

A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...