mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 12:38:17 -10:00
Update Sun Oct 26 11:30:15 UTC 2025
This commit is contained in:
trickest-workflows committed
1 parent
c1153179fe
commit
2492434aef
25 files changed
+315
-2
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2005-0541](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0541)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
consoleConnect.jsp in Cyclades AlterPath Manager (APM) Console Server 1.2.1 allows remote attackers to connect to arbitrary consoles by modifying the consolename parameter.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.cirt.net/advisories/alterpath_console.shtml
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2013-3136](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3136)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The kernel in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 on 32-bit platforms does not properly handle unspecified page-fault system calls, which allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Kernel Information Disclosure Vulnerability."
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16847
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2019-18955](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18955)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 2019.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.lansweeper.com/changelog/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ A stored cross-site scripting vulnerability exists in the WebUserActions.aspx fu
|
||||
|
||||
#### Reference
|
||||
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442
|
||||
- https://www.lansweeper.com/changelog/
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -11,6 +11,7 @@ An SQL injection vulnerability exists in the AssetActions.aspx functionality of
|
||||
|
||||
#### Reference
|
||||
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1444
|
||||
- https://www.lansweeper.com/changelog/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ An SQL injection vulnerability exists in the EchoAssets.aspx functionality of La
|
||||
|
||||
#### Reference
|
||||
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1443
|
||||
- https://www.lansweeper.com/changelog/
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -11,6 +11,7 @@ A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functional
|
||||
|
||||
#### Reference
|
||||
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1441
|
||||
- https://www.lansweeper.com/changelog/
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2022-24789](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24789)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truncate arbitrary files to zero size (effectively delete them) leading to denial of service (DoS) or altering application logic. The authenticated user may unknowingly perform the actions by visiting a specially crafted site. Patched in C1 CMS v6.12, no known workarounds exist.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2022-4981](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4981)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading the affected component is advised.
|
||||
Es wurde eine Schwachstelle in DCMTK up to 3.6.7 entdeckt. Betroffen ist die Funktion DcmQueryRetrieveConfig::readPeerList der Datei /dcmqrcnf.cc der Komponente dcmqrscp. Dank Manipulation mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Umgesetzt werden muss der Angriff lokal. Die Ausnutzung wurde veröffentlicht und kann verwendet werden. Das Aktualisieren auf Version 3.6.8 kann dieses Problem lösen. Die Bezeichnung des Patches lautet 957fb31e5. Die Aktualisierung der betroffenen Komponente wird empfohlen.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://shimo.im/docs/e1Azd4dDQXUgOGqW/read
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ An SEH-based buffer overflow in the BPQ32 HTTP Server in BPQ32 6.0.24.1 allows r
|
||||
|
||||
#### Reference
|
||||
- https://themodernham.com/bbs-hacking-discovering-rce-within-bpq32-seh-based-buffer-overflow/
|
||||
- https://www.youtube.com/%40ModernHam
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-10545](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10545)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when adding channel members which allows guest users to add any team members to their private channels via the `/api/v4/channels/{channel_id}/members` endpoint
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -13,6 +13,7 @@ Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous
|
||||
- https://github.com/h3st4k3r/CVE-2025-30065/blob/main/POC-CVE-2025-30065-ParquetExploitGenerator.java
|
||||
- https://github.com/mouadk/parquet-rce-poc-CVE-2025-30065/blob/main/src/main/java/com/evil/GenerateMaliciousParquetSSRF.java
|
||||
- https://news.ycombinator.com/item?id=43603091
|
||||
- https://www.bleepingcomputer.com/news/security/max-severity-rce-flaw-discovered-in-widely-used-apache-parquet/
|
||||
|
||||
#### Github
|
||||
- https://github.com/B1ack4sh/Blackash-CVE-2025-30065
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2025-41410](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-41410)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost versions 10.10.x <= 10.10.2, 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to validate email ownership during Slack import process which allows attackers to create verified user accounts with arbitrary email domains via malicious Slack import data to bypass email-based team access restrictions
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-41443](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-41443)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when accessing channel information which allows guest users to discover active public channels and their metadata via the `/api/v4/teams/{team_id}/channels/ids` endpoint
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,7 +12,7 @@ Eine kritische Schwachstelle wurde in FreeFloat FTP Server 1.0 entdeckt. Dies be
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://vuldb.com/?submit.581285
|
||||
|
||||
#### Github
|
||||
- https://github.com/cnetsec/south-america-cve-hall
|
||||
|
||||
@@ -11,6 +11,7 @@ CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.bleepingcomputer.com/news/security/crushftp-zero-day-exploited-in-attacks-to-gain-admin-access-on-servers/
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2025-54309-detect-crushftp-vulnerability
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2025-54309-mitigate-crushftp-vulnerability
|
||||
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2025-54499](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54499)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2025-55035](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55035)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost Desktop App versions <=5.13.0 fail to manage modals in the Mattermost Desktop App that stops a user with a server that uses basic authentication from accessing their server which allows an attacker that provides a malicious server to the user to deny use of the Desktop App via having the user configure the malicious server and forcing a modal popup that cannot be closed.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-55757](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55757)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-55757
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fail
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/ajansha/CVE-2025-55903
|
||||
|
||||
#### Github
|
||||
- https://github.com/ajansha/CVE-2025-55903
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2025-58073](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58073)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the OAuth state.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2025-58075](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58075)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, 10.5.x <= 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the RelayState
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2025-58084](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58084)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://mattermost.com/security-updates
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-61413](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61413)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Saconyfx/security-advisories/blob/main/CVE-2025-61413/advisory.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -1718,6 +1718,7 @@ CVE-2005-0527 - http://marc.info/?l=bugtraq&m=110935267500395&w=2
|
||||
CVE-2005-0529 - http://www.redhat.com/support/errata/RHSA-2005-366.html
|
||||
CVE-2005-0530 - http://www.redhat.com/support/errata/RHSA-2005-366.html
|
||||
CVE-2005-0531 - http://www.redhat.com/support/errata/RHSA-2005-366.html
|
||||
CVE-2005-0541 - http://www.cirt.net/advisories/alterpath_console.shtml
|
||||
CVE-2005-0550 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018
|
||||
CVE-2005-0551 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-018
|
||||
CVE-2005-0553 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-020
|
||||
@@ -26610,6 +26611,7 @@ CVE-2013-3111 - https://www.exploit-db.com/exploits/40907/
|
||||
CVE-2013-3120 - https://www.exploit-db.com/exploits/40844/
|
||||
CVE-2013-3121 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16875
|
||||
CVE-2013-3129 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
|
||||
CVE-2013-3136 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16847
|
||||
CVE-2013-3143 - http://packetstormsecurity.com/files/140166/Microsoft-Internet-Explorer-9-IEFRAME-CMarkup..RemovePointerPos-Use-After-Free.html
|
||||
CVE-2013-3143 - https://www.exploit-db.com/exploits/40923/
|
||||
CVE-2013-3154 - http://blogs.technet.com/b/srd/archive/2013/07/09/assessing-risk-for-the-july-2013-security-updates.aspx
|
||||
@@ -67236,6 +67238,7 @@ CVE-2019-18935 - https://www.bleepingcomputer.com/news/security/us-federal-agenc
|
||||
CVE-2019-18951 - http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.html
|
||||
CVE-2019-18952 - http://packetstormsecurity.com/files/155324/Xfilesharing-2.5.1-Local-File-Inclusion-Shell-Upload.html
|
||||
CVE-2019-18954 - https://github.com/cl0udz/vulnerabilities/tree/master/pomelo-critical-state-manipulation
|
||||
CVE-2019-18955 - https://www.lansweeper.com/changelog/
|
||||
CVE-2019-18956 - https://github.com/blackarrowsec/advisories/tree/master/2019/CVE-2019-18956
|
||||
CVE-2019-18957 - http://packetstormsecurity.com/files/155320/MicroStrategy-Library-Cross-Site-Scripting.html
|
||||
CVE-2019-18958 - https://a-man-in-the-cookie.blogspot.com/2019/11/nitro-pro-vulnerability.html
|
||||
@@ -91634,6 +91637,7 @@ CVE-2022-21134 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-
|
||||
CVE-2022-2114 - https://wpscan.com/vulnerability/59911ba4-fa06-498a-9e7c-0c337cce691c
|
||||
CVE-2022-21144 - https://snyk.io/vuln/SNYK-JS-LIBXMLJS-2348756
|
||||
CVE-2022-21145 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1442
|
||||
CVE-2022-21145 - https://www.lansweeper.com/changelog/
|
||||
CVE-2022-21147 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1452
|
||||
CVE-2022-21149 - https://snyk.io/vuln/SNYK-PHP-SCARTCORE-2389036
|
||||
CVE-2022-21149 - https://snyk.io/vuln/SNYK-PHP-SCARTSCART-2389035
|
||||
@@ -91666,6 +91670,7 @@ CVE-2022-21199 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-
|
||||
CVE-2022-21201 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1456
|
||||
CVE-2022-21208 - https://security.snyk.io/vuln/SNYK-JS-NODEOPCUA-2988723
|
||||
CVE-2022-21210 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1444
|
||||
CVE-2022-21210 - https://www.lansweeper.com/changelog/
|
||||
CVE-2022-21211 - https://snyk.io/vuln/SNYK-JS-POSIX-2400719
|
||||
CVE-2022-21213 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-2870623
|
||||
CVE-2022-21213 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2870622
|
||||
@@ -91681,6 +91686,7 @@ CVE-2022-21227 - https://snyk.io/vuln/SNYK-JS-SQLITE3-2388645
|
||||
CVE-2022-2123 - https://wpscan.com/vulnerability/46b634f6-92bc-4e00-a4c0-c25135c61922
|
||||
CVE-2022-21231 - https://snyk.io/vuln/SNYK-JS-DEEPGETSET-2342655
|
||||
CVE-2022-21234 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1443
|
||||
CVE-2022-21234 - https://www.lansweeper.com/changelog/
|
||||
CVE-2022-21235 - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMMASTERMINDSVCS-2437078
|
||||
CVE-2022-21236 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1446
|
||||
CVE-2022-21238 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1469
|
||||
@@ -92210,6 +92216,7 @@ CVE-2022-22140 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-
|
||||
CVE-2022-22143 - https://snyk.io/vuln/SNYK-JS-CONVICT-2340604
|
||||
CVE-2022-22144 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1459
|
||||
CVE-2022-22149 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1441
|
||||
CVE-2022-22149 - https://www.lansweeper.com/changelog/
|
||||
CVE-2022-2215 - https://wpscan.com/vulnerability/daa9b6c1-1ee1-434c-9f88-fd273b7e20bb
|
||||
CVE-2022-22150 - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1439
|
||||
CVE-2022-2216 - https://huntr.dev/bounties/505a3d39-2723-4a06-b1f7-9b2d133c92e1
|
||||
@@ -93006,6 +93013,7 @@ CVE-2022-2476 - https://github.com/dbry/WavPack/issues/121
|
||||
CVE-2022-24760 - https://www.huntr.dev/bounties/ac24b343-e7da-4bc7-ab38-4f4f5cc9d099/
|
||||
CVE-2022-24780 - http://packetstormsecurity.com/files/167236/iTop-Remote-Command-Execution.html
|
||||
CVE-2022-24780 - https://markus-krell.de/itop-template-injection-inside-customer-portal/
|
||||
CVE-2022-24789 - https://github.com/Orckestra/C1-CMS-Foundation/releases/tag/v6.12
|
||||
CVE-2022-24799 - https://github.com/wireapp/wire-webapp/releases/tag/2022-03-30-production.0
|
||||
CVE-2022-2480 - http://packetstormsecurity.com/files/168115/Chrome-content-ServiceWorkerVersion-MaybeTimeoutRequest-Heap-Use-After-Free.html
|
||||
CVE-2022-24801 - https://www.oracle.com/security-alerts/cpujul2022.html
|
||||
@@ -100458,6 +100466,7 @@ CVE-2022-4971 - https://wpscan.com/vulnerability/4631519b-2060-43a0-b69b-b3d7ed9
|
||||
CVE-2022-4974 - https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a
|
||||
CVE-2022-4978 - https://www.vulncheck.com/advisories/steppschuh-remote-control-server-unauth-rce
|
||||
CVE-2022-4979 - https://www.vulncheck.com/advisories/sitecore-xp-cms-managed-cloud-xss
|
||||
CVE-2022-4981 - https://shimo.im/docs/e1Azd4dDQXUgOGqW/read
|
||||
CVE-2022-50237 - https://github.com/MystenLabs/ed25519-unsafe-libs
|
||||
CVE-2023-0005 - https://security.paloaltonetworks.com/CVE-2023-0005
|
||||
CVE-2023-0012 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
|
||||
@@ -114244,6 +114253,7 @@ CVE-2024-34073 - https://github.com/aws/sagemaker-python-sdk/commit/2d873d53f708
|
||||
CVE-2024-34075 - https://github.com/xiboon/kurwov/security/advisories/GHSA-hfrv-h3q8-9jpr
|
||||
CVE-2024-34082 - https://github.com/getgrav/grav/security/advisories/GHSA-f8v5-jmfh-pr69
|
||||
CVE-2024-34087 - https://themodernham.com/bbs-hacking-discovering-rce-within-bpq32-seh-based-buffer-overflow/
|
||||
CVE-2024-34087 - https://www.youtube.com/%40ModernHam
|
||||
CVE-2024-34089 - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
|
||||
CVE-2024-34090 - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
|
||||
CVE-2024-34091 - https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/720963
|
||||
@@ -120029,6 +120039,7 @@ CVE-2025-10541 - https://r.sec-consult.com/imonitor
|
||||
CVE-2025-10541 - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/
|
||||
CVE-2025-10542 - https://r.sec-consult.com/imonitor
|
||||
CVE-2025-10542 - https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/
|
||||
CVE-2025-10545 - https://mattermost.com/security-updates
|
||||
CVE-2025-10548 - https://r.sec-consult.com/clevercontrol
|
||||
CVE-2025-10562 - https://github.com/zzb1388/cve/issues/77
|
||||
CVE-2025-10563 - https://github.com/zzb1388/cve/issues/76
|
||||
@@ -122411,6 +122422,7 @@ CVE-2025-3006 - https://github.com/yasuoz99/CVE-/issues/1
|
||||
CVE-2025-30065 - https://github.com/h3st4k3r/CVE-2025-30065/blob/main/POC-CVE-2025-30065-ParquetExploitGenerator.java
|
||||
CVE-2025-30065 - https://github.com/mouadk/parquet-rce-poc-CVE-2025-30065/blob/main/src/main/java/com/evil/GenerateMaliciousParquetSSRF.java
|
||||
CVE-2025-30065 - https://news.ycombinator.com/item?id=43603091
|
||||
CVE-2025-30065 - https://www.bleepingcomputer.com/news/security/max-severity-rce-flaw-discovered-in-widely-used-apache-parquet/
|
||||
CVE-2025-30066 - https://github.com/tj-actions/changed-files/issues/2464
|
||||
CVE-2025-30066 - https://www.wiz.io/blog/github-action-tj-actions-changed-files-supply-chain-attack-cve-2025-30066
|
||||
CVE-2025-30072 - http://seclists.org/fulldisclosure/2025/May/20
|
||||
@@ -123263,8 +123275,10 @@ CVE-2025-4133 - https://wpscan.com/vulnerability/ebd7e5f5-af8d-42ca-b6ff-af92e03
|
||||
CVE-2025-4134 - https://www.gendigital.com/us/en/contact-us/security-advisories/
|
||||
CVE-2025-4136 - https://www.cnblogs.com/aibot/p/18830909
|
||||
CVE-2025-41395 - https://mattermost.com/security-updates
|
||||
CVE-2025-41410 - https://mattermost.com/security-updates
|
||||
CVE-2025-41423 - https://mattermost.com/security-updates
|
||||
CVE-2025-41426 - https://www.vertiv.com/en-us/support/security-support-center/
|
||||
CVE-2025-41443 - https://mattermost.com/security-updates
|
||||
CVE-2025-4151 - https://github.com/faithhard/cve/issues/1
|
||||
CVE-2025-4152 - https://github.com/faithhard/cve/issues/2
|
||||
CVE-2025-4153 - https://github.com/y77-88/myCVE/issues/2
|
||||
@@ -124190,6 +124204,7 @@ CVE-2025-50493 - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50493
|
||||
CVE-2025-50494 - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50494
|
||||
CVE-2025-50505 - https://github.com/bron1e/CVE-2025-50505
|
||||
CVE-2025-50528 - https://github.com/pfwqdxwdd/cve/blob/main/1.md
|
||||
CVE-2025-5053 - https://vuldb.com/?submit.581285
|
||||
CVE-2025-50538 - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-964p-j4gg-mhwc
|
||||
CVE-2025-5054 - https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt
|
||||
CVE-2025-5056 - https://github.com/Jacob-z691/CVE/issues/1
|
||||
@@ -124747,6 +124762,7 @@ CVE-2025-5419 - https://issues.chromium.org/issues/420636529
|
||||
CVE-2025-54236 - https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento
|
||||
CVE-2025-5427 - https://vuldb.com/?id.310760
|
||||
CVE-2025-54286 - https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h
|
||||
CVE-2025-54309 - https://www.bleepingcomputer.com/news/security/crushftp-zero-day-exploited-in-attacks-to-gain-admin-access-on-servers/
|
||||
CVE-2025-54309 - https://www.vicarius.io/vsociety/posts/cve-2025-54309-detect-crushftp-vulnerability
|
||||
CVE-2025-54309 - https://www.vicarius.io/vsociety/posts/cve-2025-54309-mitigate-crushftp-vulnerability
|
||||
CVE-2025-54313 - https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions
|
||||
@@ -124811,6 +124827,7 @@ CVE-2025-54491 - https://talosintelligence.com/vulnerability_reports/TALOS-2025-
|
||||
CVE-2025-54492 - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2234
|
||||
CVE-2025-54493 - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2234
|
||||
CVE-2025-54494 - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2234
|
||||
CVE-2025-54499 - https://mattermost.com/security-updates
|
||||
CVE-2025-54525 - https://mattermost.com/security-updates
|
||||
CVE-2025-54571 - https://github.com/owasp-modsecurity/ModSecurity/issues/2514
|
||||
CVE-2025-54571 - https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-cg44-9m43-3f9v
|
||||
@@ -124870,6 +124887,7 @@ CVE-2025-55004 - https://github.com/ImageMagick/ImageMagick/security/advisories/
|
||||
CVE-2025-55005 - https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp
|
||||
CVE-2025-55010 - https://github.com/kanboard/kanboard/security/advisories/GHSA-359x-c69j-q64r
|
||||
CVE-2025-55011 - https://github.com/kanboard/kanboard/security/advisories/GHSA-26f4-rx96-xc55
|
||||
CVE-2025-55035 - https://mattermost.com/security-updates
|
||||
CVE-2025-5509 - https://github.com/uglory-gll/javasec/blob/main/shiyi-blog.md
|
||||
CVE-2025-5509 - https://github.com/uglory-gll/javasec/blob/main/shiyi-blog.md#1file-path-traversal
|
||||
CVE-2025-5510 - https://github.com/uglory-gll/javasec/blob/main/shiyi-blog.md
|
||||
@@ -125006,6 +125024,7 @@ CVE-2025-55743 - https://github.com/unopim/unopim/security/advisories/GHSA-v22v-
|
||||
CVE-2025-55744 - https://github.com/unopim/unopim/security/advisories/GHSA-287x-6r2h-f9mw
|
||||
CVE-2025-55745 - https://github.com/unopim/unopim/security/advisories/GHSA-74rg-6f92-g6wx
|
||||
CVE-2025-5575 - https://github.com/FLYFISH567/CVE/issues/10
|
||||
CVE-2025-55757 - https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-55757
|
||||
CVE-2025-5576 - https://github.com/FLYFISH567/CVE/issues/11
|
||||
CVE-2025-55763 - https://github.com/krispybyte/CVE-2025-55763
|
||||
CVE-2025-5577 - https://github.com/FLYFISH567/CVE/issues/12
|
||||
@@ -125022,6 +125041,7 @@ CVE-2025-5584 - https://github.com/Ant1sec-ops/Hospital-management-Systemv4.0-St
|
||||
CVE-2025-55852 - https://github.com/CyberJ3ff/IOT/blob/main/tenda/tenda%20AC8%20v4%20V16.03.34.06/detail.md
|
||||
CVE-2025-55885 - https://github.com/0xZeroSec/CVE-2025-55885
|
||||
CVE-2025-55888 - https://github.com/0xZeroSec/CVE-2025-55888
|
||||
CVE-2025-55903 - https://github.com/ajansha/CVE-2025-55903
|
||||
CVE-2025-55904 - https://github.com/open5gs/open5gs/issues/3942
|
||||
CVE-2025-55911 - https://medium.com/@mukund.s1337/cve-2025-55911-clipbucket-5-5-2-build-90-ssrf-via-upload-actions-file-downloader-php-eb49dc02bd6f
|
||||
CVE-2025-55912 - https://medium.com/@mukund.s1337/cve-2025-55912-clipbucket-5-5-0-unauthenticated-arbitrary-file-upload-rce-720c0c0fbc58
|
||||
@@ -125303,6 +125323,9 @@ CVE-2025-58060 - https://github.com/OpenPrinting/cups/security/advisories/GHSA-4
|
||||
CVE-2025-58061 - https://github.com/openebs/rawfile-localpv/security/advisories/GHSA-wh95-vw4r-xwx4
|
||||
CVE-2025-58062 - https://github.com/LSTM-Kirigaya/openmcp-client/security/advisories/GHSA-43m4-p3rv-c4v8
|
||||
CVE-2025-58063 - https://github.com/coredns/coredns/security/advisories/GHSA-93mf-426m-g6x9
|
||||
CVE-2025-58073 - https://mattermost.com/security-updates
|
||||
CVE-2025-58075 - https://mattermost.com/security-updates
|
||||
CVE-2025-58084 - https://mattermost.com/security-updates
|
||||
CVE-2025-58159 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-wj2c-237g-cgqp
|
||||
CVE-2025-58161 - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-ccc3-fvfx-mw3v
|
||||
CVE-2025-58162 - https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-9gh8-9r95-3fc3
|
||||
@@ -125613,6 +125636,7 @@ CVE-2025-6140 - https://github.com/gabime/spdlog/issues/3360
|
||||
CVE-2025-6140 - https://github.com/gabime/spdlog/issues/3360#issuecomment-2729579422
|
||||
CVE-2025-6141 - https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html
|
||||
CVE-2025-6141 - https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html
|
||||
CVE-2025-61413 - https://github.com/Saconyfx/security-advisories/blob/main/CVE-2025-61413/advisory.md
|
||||
CVE-2025-6143 - https://github.com/awindog/cve/blob/main/13.md
|
||||
CVE-2025-6144 - https://github.com/awindog/cve/blob/main/688/1.md
|
||||
CVE-2025-6144 - https://github.com/awindog/cve/blob/main/688/1.md#poc
|
||||
|
||||
Reference in new issue
Block a user