2905878 matches found
Eclipse Jetty - Information Disclosure
Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...
WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting
WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...
Netgear R6850 V1.1.0.88 - Command Injection
Netgear R6850 router firmware version V1.1.0.88 suffers from a command injection vulnerability in the pingtest functionality. An unauthenticated attacker can inject arbitrary system commands through the c4IPAddr parameter, resulting in remote code execution as root. id: CVE-2024-30568 info: name:...
Debug Endpoint pprof - Exposure Detection
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8,...
PyArrow Flight RPC - Remote Code Execution
PyArrow Flight RPC from v0.14.0 through v14.0.0 allows remote attackers to execute arbitrary code via a maliciously crafted Python-defined extension type. id: CVE-2023-47248 info: name: PyArrow Flight RPC - Remote Code Execution author: smolse severity: critical description: | PyArrow Flight RPC...
phpBB < 3.3.17 - Authentication Bypass
phpBB before 3.3.17 contains an authentication bypass vulnerability in the login-link feature. By setting the authprovider query parameter to "apache", an unauthenticated attacker can bypass password verification and log in as any user, including administrators. The Apache auth provider trusts th...
Micro Focus Operations Bridge Reporter - Remote Code Execution
Micro Focus Operations Bridge Reporter 10.40 is susceptible to remote code execution. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or execute unauthorized operations without entering necessary credentials. id: CVE-2021-22502 info: name: Micro Focus...
Dahua Smart Park Management - Arbitrary File Upload
Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...
WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload
WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...
Nuclei-Templates-Collection
https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...
CVE-2026-27507
CVE-2026-27507...
CVE-2026-26198
CVE-2026-26198...
CVE-2020-17519-Exp
CVE-2020-17519-Exp CVE-2020-17519 EXP...
Snyk Scan
Bitbucket Pipelines Pipe: Snyk Diese Pipe verwendet Snyk, um bekannte Schwachstellen in Ihren App-Abhängigkeiten und Docker-Images zu finden, zu beheben und zu überwachen. YAML-Definition Fügen Sie den folgenden Ausschnitt in den Skriptabschnitt Ihrer Datei bitbucket-pipelines.yml ein:...
tbhm
बग हंटर की कार्यप्रणाली TBHM स्वागत है! यह रिपॉजिटरी निम्नलिखित का संग्रह है युक्तियाँ तरकीबें उपकरण डेटा विश्लेषण और नोट्स जो वेब एप्लिकेशन सुरक्षा मूल्यांकन से संबंधित हैं और विशेष रूप से बग बाउंटी में बग हंटिंग की ओर लक्षित हैं। वर्तमान अनुभाग इस प्रकार विभाजित हैं: हैकिंग शुरू करने से पहले...
CVE-2021-4034-Capture-the-flag
CVE-2021-4034-Capture-the-flag Видеодемонстрация Capture the Flag: https://www.youtube.com/watch?v=1N3x23X4FMk&t=103s...
slither
Slither, der statische Analysator für Smart Contracts Tritt dem Empire Hacking Slack bei - Diskussionen und Support Slither ist ein in Python3 geschriebenes statisches Analyse-Framework für Solidity und Vyper. Es führt eine Reihe von Schwachstellendetektoren aus, gibt visuelle Informationen über...
CVE-2018-6574
CVE-2018-6574...
nmap-nse-vulnerability-scripts
NMAP-Schwachstellenscan-Skripte Eine Sammlung von nmap-Schwachstellenscan-Skripten zur Unterstützung kostengünstiger Erkennung und Behebung. Hintergrund Diese Skripte verwenden die Nmap Scripting Engine NSE, um Prüfungen auf verschiedene Schwachstellen zu implementieren. Referenzen:...