mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Sun Aug 30 12:39:30 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
031b718845
commit
a52834dd85
187 files changed
+3135
-4
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2003-1448](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1448)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation packet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.immunitysec.com/downloads/advantages_of_block_based_analysis.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2004-0368](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0368)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html
|
||||
- http://www.immunitysec.com/downloads/dtlogin.sxw.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2004-0478](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0478)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Ser
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.immunitysec.com/downloads/instantanea.pdf
|
||||
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2004-1812](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1812)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.immunitysec.com/downloads/awservices.sxw.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2004-2686](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2686)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.immunitysec.com/downloads/solaris_kernel_vfs.sxw.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers
|
||||
|
||||
#### Reference
|
||||
- http://marc.info/?l=bugtraq&m=110943766505666&w=2
|
||||
- http://www.exploit-db.com/exploits/24897
|
||||
- http://www.exploit-db.com/exploits/24950
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote att
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.exploit-db.com/exploits/15860
|
||||
- http://www.exploitlabs.com/files/advisories/EXPL-A-2005-016-typsoft-ftpd.txt
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2005-3912](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3912)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Format string vulnerability in miniserv.pl Perl web server in Webmin before 1.250 and Usermin before 1.180, with syslog logging enabled, allows remote attackers to cause a denial of service (crash or memory consumption) and possibly execute arbitrary code via format string specifiers in the username parameter to the login form, which is ultimately used in a syslog call. NOTE: the code execution might be associated with an issue in Perl.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2005-November/002685.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0106](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0106)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile (WMF) files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-January/002806.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002909.html
|
||||
- http://www.securityfocus.com/archive/1/427981/100/0/threaded
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0580](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0580)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted packet to the LDAP port (389/TCP).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002896.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2006-0647](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0647)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a denial of service (memory allocation error) via an LDAP packet with a crafted subtree search request, as demonstrated using the ProtoVer LDAP test suite.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002914.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002916.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0696](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0696)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.vupen.com/english/advisories/2006/0546
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0697](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0697)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.vupen.com/english/advisories/2006/0546
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0698](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0698)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://www.vupen.com/english/advisories/2006/0546
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0710](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0710)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002925.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0717](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0717)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002921.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-0790](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0790)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets to port 389/TCP, as demonstrated by the ProtoVer LDAP testsuite.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002926.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-February/002982.html
|
||||
- http://securityreason.com/securityalert/521
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-2183](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2183)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-April/003152.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers t
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-July/003354.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/mudongliang/LinuxFlaw
|
||||
|
||||
@@ -10,7 +10,7 @@ Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2006-December/003888.html
|
||||
|
||||
#### Github
|
||||
- https://github.com/0xd012/wifuzzit
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2006-6931](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6931)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2007-0675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0675)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sound object that contains voice commands to an enabled microphone, allowing for interaction with Windows Explorer.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-January/004003.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-January/004005.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-January/004007.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-January/004012.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-February/004118.html
|
||||
- https://www.exploit-db.com/exploits/3383
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2007-1222](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1222)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-February/004091.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2007-3634](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3634)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary commands via unspecified vectors, possibly related to the passphrase variable in the gpg_sign_attachment function, aka ZD-00000004. this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004448.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004452.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004453.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2007-3636](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3636)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via unspecified vectors. NOTE: this information is based upon a vague pre-advisory from a reliable researcher.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004453.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2007-3637](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3637)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-00000008. this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004448.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,8 @@ The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004452.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2007-July/004456.html
|
||||
- http://www.attrition.org/pipermail/vim/2007-July/001704.html
|
||||
- http://www.attrition.org/pipermail/vim/2007-July/001710.html
|
||||
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35363
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2008-0098](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0098)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: As of 20080103, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2008-January/004811.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2008-4434](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4434)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Created By field in a .torrent file.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/attachments/20080811/35d6194b/attachment-0001.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Micros
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2008-October/005360.html
|
||||
- http://searchsecurity.techtarget.com.au/articles/27154-TCP-is-fundamentally-borked
|
||||
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
|
||||
- http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
|
||||
|
||||
@@ -10,6 +10,7 @@ The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco p
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2008-November/005413.html
|
||||
- http://radajo.blogspot.com/2008/11/wpatkip-chopchop-attack.html
|
||||
- http://www.aircrack-ng.org/doku.php?id=tkiptun-ng
|
||||
|
||||
|
||||
@@ -11,6 +11,7 @@ Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 1120 and
|
||||
|
||||
#### Reference
|
||||
- http://blog.zoller.lu/2009/03/remote-code-execution-in-pdf-still.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006079.html
|
||||
- http://www.coresecurity.com/content/foxit-reader-vulnerabilities
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -12,6 +12,7 @@ Multiple stack-based buffer overflows in the CertDecoder::GetName function in sr
|
||||
#### Reference
|
||||
- http://bugs.mysql.com/bug.php?id=50227
|
||||
- http://isc.sans.org/diary.html?storyid=7900
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html
|
||||
- http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14
|
||||
- https://bugzilla.redhat.com/show_bug.cgi?id=555313
|
||||
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2009-4764](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4764)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users into executing arbitrary code via a crafted document.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006072.html
|
||||
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006074.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the B
|
||||
#### Reference
|
||||
- http://jira.pentaho.com/browse/BISERVER-13207
|
||||
- http://jira.pentaho.com/browse/BISERVER-3562
|
||||
- http://jira.pentaho.com/browse/BISERVER-6599
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with n
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://shielder.it/blog
|
||||
- https://www.shielder.com/advisories/librenms-graph-authenticated-command-injection/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with n
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://shielder.it/blog
|
||||
- https://www.shielder.com/advisories/librenms-searchphrase-authenticated-sql-injection/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with n
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://shielder.it/blog
|
||||
- https://www.shielder.com/advisories/librenms-address-authenticated-sql-injection/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2021-22182](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22182)
|
||||
|
||||
|
||||
|
||||
%20in%20GitLab&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gitlab.com/gitlab-org/gitlab/-/issues/280779
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ M-Files Web before 20.10.9524.1 allows a denial of service via overlapping range
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/165139/M-Files-Web-Denial-Of-Service.html
|
||||
- http://seclists.org/fulldisclosure/2021/Dec/1
|
||||
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2021-37253
|
||||
- https://www.tenable.com/cve/CVE-2021-37253
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2023-0957](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0957)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to the Gitpod JSONRPC server using a victim’s credentials, because the Origin header is not restricted. This can lead to the extraction of data from workspaces, to a full takeover of the workspace.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://snyk.io/blog/gitpod-remote-code-execution-vulnerability-websockets/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote a
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/177082
|
||||
- http://seclists.org/fulldisclosure/2024/Feb/11
|
||||
|
||||
#### Github
|
||||
- https://github.com/codeb0ss/CVE-2024-25735-PoC
|
||||
|
||||
@@ -11,7 +11,7 @@ Broken access control in NetAdmin 4.030319 returns data with functionalities on
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-48955&sortby=bydate
|
||||
|
||||
#### Github
|
||||
- https://github.com/BrotherOfJhonny/CVE-2024-48955_Overview
|
||||
|
||||
@@ -11,6 +11,7 @@ Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.
|
||||
|
||||
#### Reference
|
||||
- https://github.com/tcbutler320/Sensaphone-WEB600-XSS
|
||||
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-55040
|
||||
|
||||
#### Github
|
||||
- https://github.com/tcbutler320/CVE-2024-55040-Sensaphone-XSS
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
### [CVE-2024-58315](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58315)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
@@ -12,6 +12,7 @@ In Fujian mwcms 1.0.0 wurde eine kritische Schwachstelle ausgemacht. Dabei geht
|
||||
|
||||
#### Reference
|
||||
- https://github.com/DeepMountains/Mirage/blob/main/CVE12-1.md
|
||||
- https://vuldb.com/?ctiid.274183
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -13,6 +13,7 @@ In code-projects Restaurant Order System 1.0 wurde eine kritische Schwachstelle
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ez-lbz/poc/issues/1
|
||||
- https://vuldb.com/?ctiid.312592
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-13780](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13780)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.chromium.org/issues/514769383
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-14307](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14307)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served with an HTML content type, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a victim is tricked into submitting a crafted request.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/5f55b592-9113-47d1-8b48-6ba785c0834a/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-14835](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14835)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custom header/footer script values saved from its post metabox, and does not restrict them to users with the unfiltered_html capability, allowing users with contributor-level access and above to store JavaScript that executes in the browser of any administrator who reviews the post and of any visitor once the post is published.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/f0b869b1-ef43-4540-9ca5-4440e763d307/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-15034](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15034)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in flask-dashboard Flask-MonitoringDashboard up to 5.0.2. Affected by this issue is some unknown functionality. Such manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/flask-dashboard/Flask-MonitoringDashboard/issues/557
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15035](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15035)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performing a manipulation of the argument cmd results in command injection. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/bentoml/OpenLLM/issues/1229
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-15105](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15105)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in davenardella snap7 up to 1.4.3. This affects the function TS7Worker::PerformFunctionRead of the file src/core/s7_server.cpp of the component ReadVar Request Handler. This manipulation causes out-of-bounds write. The attack requires access to the local network. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/davenardella/snap7/issues/16
|
||||
- https://github.com/user-attachments/files/28681740/poc.zip
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ A security flaw has been discovered in code-projects Online Food Order System 1.
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/susususua-AI/CVE/issues/1
|
||||
- https://vuldb.com/submit/851065
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-15138](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15138)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function _validate_file_path of the file mcp_text_editor/text_editor.py. Such manipulation of the argument file_path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor closed the GitHub issue for this vulnerability without any explanation.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/tumf/mcp-text-editor/issues/22
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -16,6 +16,7 @@ A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/LibreDWG/libredwg/issues/1253
|
||||
- https://vuldb.com/submit/851192
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-15192](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15192)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sendgrid/postmark/postal/mailjet of the component APIv1 Webhooks. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/mettle/sendportal/issues/340
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15194)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in Open5GS 2.7.7. This affects the function amf_context_final of the file src/amf/context.c of the component AMF. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/open5gs/open5gs/security/advisories/GHSA-88pq-hpwv-2vjw
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,24 @@
|
||||
### [CVE-2026-15195](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15195)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack can be launched remotely. Upgrading to version 15.3.6 will fix this issue. This patch is called a786bc6afc3674f650496472ee93d5cf74c4bd84. It is suggested to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/APIDevTools/json-schema-ref-parser/issues/421
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15204](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15204)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. Affected by this vulnerability is the function exportOvpn of the file /web/cgi-bin/cstecgi.cgi of the component OpenVPN Export. The manipulation results in path traversal. The attack may be launched remotely.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/meishigana/CVE/tree/main/totolink_x5000r_exportovpn_file_disclosure_2026-06-09
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,25 @@
|
||||
### [CVE-2026-15274](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15274)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part of the file src/pull_parser/v7400/parser.rs of the component Node Header Handler. The manipulation results in denial of service. The attack must be initiated from a local position. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/lo48576/fbxcel/issues/14
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,21 @@
|
||||
### [CVE-2026-15311](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15311)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in NousResearch hermes-agent up to 2026.5.29.2. Affected by this issue is the function MatrixAdapter._markdown_to_html of the file gateway/platforms/matrix.py of the component Matrix Adapter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/NousResearch/hermes-agent/issues/42667
|
||||
- https://github.com/NousResearch/hermes-agent/pull/42759
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,26 @@
|
||||
### [CVE-2026-15317](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15317)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. Affected by this vulnerability is the function WebFetchTool.Execute of the file pkg/tools/integration/web.go of the component Guarded Web Fetch Flow. The manipulation results in server-side request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/sipeed/picoclaw/issues/3078
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-15318](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15318)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Affected by this issue is some unknown functionality of the file pkg/channels/mqtt/mqtt.go of the component MQTT Channel Handler. This manipulation of the argument client_id causes incorrect authorization. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The reported GitHub issue was closed automatically due to inactivity.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/sipeed/picoclaw/issues/3068
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-15320](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15320)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. The reported GitHub issue was closed automatically due to inactivity.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/sipeed/picoclaw/issues/3071
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-15332](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15332)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in zhayujie CowAgent up to 2.1.0. The impacted element is an unknown function of the file channel/channel.py of the component Message Endpoint. The manipulation results in missing authorization. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/zhayujie/CowAgent/issues/2874
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impact
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/1QqpeH0qWsSnSiMvPeRJvRSylwLGK3hsN/view?usp=sharing
|
||||
- https://github.com/omarelshopky/cves/tree/main/eleveo/call-recording-software/CVE-2026-15373
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an u
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/1GtIZC_PrOJPfQAfjcBckEbf8uDzGjt9B/view?usp=sharing
|
||||
- https://github.com/omarelshopky/cves/tree/main/eleveo/call-recording-software/CVE-2026-15374
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ A vulnerability was found in Eleveo Call Recording Software 9.7.0. Affected is a
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/18l6-Lpvqq1B-ureww1zR5d_nyhZl312q/view?usp=sharing
|
||||
- https://github.com/omarelshopky/cves/tree/main/eleveo/call-recording-software/CVE-2026-15376
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ DBD::File versions before 1.651 for Perl do not ensure the table file is not a s
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/perl5-dbi/dbi/security/advisories/GHSA-mh3j-xwf4-jrqw
|
||||
- https://metacpan.org/release/HMBRAND/DBI-1.651/changes
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -12,6 +12,7 @@ A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This iss
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/1YhkazmU_1YQj9lzvwIBDzA-41fe2eayc/view?usp=sharing
|
||||
- https://github.com/omarelshopky/cves/tree/main/eleveo/call-recording-software/CVE-2026-15473
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,6 +12,7 @@ A security flaw has been discovered in Eleveo Call Recording Software 9.7.0. Imp
|
||||
|
||||
#### Reference
|
||||
- https://drive.google.com/file/d/14r-7V9dJHuoBPpuSj-puFzujq149Mbry/view?usp=sharing
|
||||
- https://github.com/omarelshopky/cves/tree/main/eleveo/call-recording-software/CVE-2026-15474
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-15478](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15478)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php of the component UserReport Endpoint. Executing a manipulation of the argument employeeList can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/gamonoid/icehrm/issues/376
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15480](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15480)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in Trendnet TEW-635BRM up to 1.00.03. This affects the function start_httpd of the file /sbin/rc of the component Web Service. Such manipulation of the argument device_name leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/glkfc/IoT-Vulnerability/blob/main/TRENDnet/TRENDnet_TEW635BRM_device_name_BOF_EN.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15481](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15481)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in Trendnet TEW-635BRM up to 1.00.03. This vulnerability affects the function ipoa_test of the file /sbin/rc of the component IPoA WAN Connection Setup. Performing a manipulation of the argument ipoa_ipaddr results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor explains: "We are unable to confirm if the vulnerability exists. This item has been EOL since 2011. We will make an official announcement of possible vulnerabilities, and recommend users to switch devices." This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/glkfc/IoT-Vulnerability/blob/main/TRENDnet/TRENDnet_TEW635BRM_ipoa_cmdinj_EN.md
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-15495](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15495)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in SonicCloudOrg sonic-agent up to 2.7.2. The affected element is an unknown function of the file AndroidWSServer.java of the component Android WebSocket Server. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/xpp3901/CVE_APPLY/tree/main/V-S003_SonicAgent_pullFile_CmdInjection_RCE
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-15496](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15496)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/xpp3901/CVE_APPLY/tree/main/V-S002_SonicCloudPlatform_Groovy_Unsandboxed_RCE
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-15499](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15499)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.2. Affected is the function FutureTaskTool.call of the file astrbot/core/tools/cron_tools.py of the component Scheduled Task Handler. Performing a manipulation of the argument payload["note"] results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/YLChen-007/2bab96d5bedef784f90c97009fff8a19
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-15501](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15501)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.test_mcp_connection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcp_server_config.url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/YLChen-007/b68732c140fb11d844b214cf2db50a5a
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-15506](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15506)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Kalagious/SecureAgeExploit
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,47 @@
|
||||
### [CVE-2026-15508](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15508)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/oscar2744/CVE-Submit/issues/1
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15515](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15515)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk Driver. The manipulation leads to uncontrolled search path. The attack must be carried out locally. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/subsubsub1231/qmukiller
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15517](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15517)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx. This manipulation of the argument httpOID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/weini587/CVE/issues/1
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15522](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15522)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw has been discovered in tugcantopaloglu godot-mcp 2.0.0. Affected by this vulnerability is the function validatePath of the file build/index.js of the component run_project. The manipulation of the argument projectPath results in path traversal. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 3.0.0 addresses this issue. The patch is identified as eb63add552aa4bd9205395cf91b40654654a3cf2. It is suggested to upgrade the affected component.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/tugcantopaloglu/godot-mcp/issues/9
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-15524](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15524)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in alioshr memory-bank-mcp up to 0.2.1/3.1. This affects an unknown part of the file list-project-files-validation-factory.ts. Such manipulation of the argument projectName leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/alioshr/memory-bank-mcp/issues/36
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-15527](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15527)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in better-auth better-icons up to 1.0.5. This vulnerability affects unknown code of the component scan_project_icons/sync_icon. Such manipulation of the argument icons_file leads to path traversal. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/better-auth/better-icons/issues/18
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15528](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15528)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in protection mechanism failure. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/lamaalrajih/kicad-mcp/issues/57
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
### [CVE-2026-15530](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15530)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in WuzhiCMS up to 4.1.0. Affected by this vulnerability is the function config/listimage of the file /index.php?m=attachment&f=index&v=upload of the component Attachment API. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/wuzhicms/wuzhicms/issues/217
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15535](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15535)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in AkariAsai self-rag up to 1fcdc420e48f50a7d7ab1ece5494221b93252e99. Affected by this issue is the function Indexer.deserialize_from of the file retrieval_lm/src/index.py of the component retrieval_lm. Executing a manipulation of the argument index_meta.faiss can lead to deserialization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/AkariAsai/self-rag/issues/105
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15558](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15558)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/deletemp.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/sl1der-fr0g/Findings/issues/2
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-15605](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15605)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the component Artifact Integrity Validation. The manipulation leads to use of weak hash. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The pull request to fix this issue awaits acceptance.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/wandb/wandb/issues/12030
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,27 @@
|
||||
### [CVE-2026-15621](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15621)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was closed with the label "not planned".
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/mosaxiv/clawlet/issues/15
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-15622](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15622)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw has been found in poco-ai poco-claw up to 0.5.4. Affected is the function get_workspace_file of the file executor_manager/app/api/v1/workspace.py of the component Workspace API. Executing a manipulation of the argument user_id can lead to authorization bypass. The attack may be launched remotely. The exploit has been published and may be used. This patch is called 67fcc88505c57f77d3fcf04eb5b89425b10cbf48. Upgrading the affected component is recommended.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/poco-ai/poco-claw/issues/133
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2026-15624](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15624)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the function bytePlusDownloadVideo of the file internal/tools/create_video_byteplus.go of the component invoke Endpoint. The manipulation of the argument output.video_url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/nextlevelbuilder/goclaw/issues/1199
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,22 @@
|
||||
### [CVE-2026-15627](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15627)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/nextlevelbuilder/goclaw/issues/1207
|
||||
- https://github.com/nextlevelbuilder/goclaw/issues/1207#issuecomment-4760370546
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-15669](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15669)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was found in louisho5 picobot up to 0.2.0. This issue affects the function ExecTool.Execute of the file internal/agent/tools/exec.go of the component exec Tool. The manipulation results in os command injection. The attack requires a local approach. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/louisho5/picobot/issues/42
|
||||
- https://github.com/louisho5/picobot/issues/43
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
Loaded 100 of 187 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user