6208 matches found
CVE-2021-32724-Target
CVE-2021-32724 익스플로잇 대상 저장소 /!\ 이 저장소는 취약한 버전의 Check Spelling Workflow로 구성되어 있습니다. /!\ 이 저장소는 CVE-2021-32724 익스플로잇의 대상입니다. 안녕하세요 세계...
grafana-CVE-2024-9264
grafana-CVE-2024-9264 이 저장소에는 CVE-2024-9264에 대한 세부 정보가 포함되어 있습니다. 또한 취약한 버전의 grafana를 빌드하며, ghcr.io/patrickpichler/grafana-cve-2024-9264:11.0.0에서 가져올 수 있습니다...
qdPM 9.2 - Directory Traversal
qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI. id: CVE-2023-45855 info: name: qdPM 9.2 - Directory Traversal author: DhiyaneshDk severity: high description: | qdPM 9.2 allows Directory Traversal to list files and directories by navigating to t...
Extreme Management Center 8.4.1.24 - Cross-Site Scripting
Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...
DedeCMS 5.7.109 - Server-Side Request Forgery
Manipulation of the rssurl parameter in codo.php leads to server-side request forgery in DedeCMS version 5.7.109. id: CVE-2023-3578 info: name: DedeCMS 5.7.109 - Server-Side Request Forgery author: ritikchaddha severity: critical description: | Manipulation of the rssurl parameter in codo.php lea...
CVE-2026-1357-Lab
CVE-2026-1357 — WPvivid Backup & Migration 취약 버전 vs 패치 버전 Docker 랩 로컬 전용 Docker 랩으로 WPvivid Backup & Migration을 비교하기 위한 것입니다: 취약 버전: 0.9.123 패치 버전: 0.9.124 학습 실습랩 구성, 검증, 로그, 메모을 위해 제작되었습니다. PoC 관련 모든 내용은 이 랩 내부localhost에서만 실행하도록 의도되었습니다. 안전 및 범위 자신의 머신에서만 실행하세요 localhost + Docker 네트워크. 소유하지 않았거나...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations in Extensions in Google Chrome prior to version 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to bypass the same-origin policy through a crafted Chrome Extension. Chromium security severity: High...
Astra Linux – Vulnerability in ntfs-3g
In NTFS-3G, from version 2021.8.22, ntfsck has a heap-based buffer overflow issue, involving a value of buffer+5123-2. NOTE: The upstream documentation states that ntfsck is deprecated; however, it is still being distributed with some Linux distributions...
CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-86433
commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...
EUVD-2026-64834
Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...
CVE-2026-66586
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
PT-2026-78942
Name of the Vulnerable Software and Affected Versions Capella versions prior to 2.5.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...
EUVD-2026-62496
Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory 6.2.3 - companyName from the request was written unescaped into an XML attribute...
MINI-MGWH-PV97-W83H
Bulletin has no description...
UBUNTU-CVE-2026-76220
GitPython before 3.1.58 contains a command execution vulnerability in the checkunsafeoptions guard that can be bypassed by combining a single-character kwarg with splitsinglecharoptions=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clonefrom to emit a joined toke...
EUVD-2026-62376
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
CVE-2026-59940
Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...
