Update Tue Sep 1 12:04:02 UTC 2026

This commit is contained in:
trickest-workflows committed 2026-09-01 12:04:03 +00:00
1 parent 25fa75b24f
commit bfcf023d9a
140 files changed
+1394 -16

No files matched your search

+1
View File
@@ -10,6 +10,7 @@ The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and
### POC
#### Reference
- http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html
- http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html
- http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike
- http://www.vupen.com/english/advisories/2009/1125
+1
View File
@@ -10,6 +10,7 @@ twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as comman
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
- https://issues.jboss.org/browse/JBPAPP-3391?_sscc=t
#### Github
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for J
#### Reference
- http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt
- http://www.exploit-db.com/exploits/10971
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-0317](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0317)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.
### POC
#### Reference
- http://www.exploit-db.com/exploits/11009
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -10,6 +10,7 @@ pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM
### POC
#### Reference
- http://www.exploit-db.com/exploits/14273
- http://www.h-online.com/security/news/item/Ubuntu-closes-root-hole-1034618.html
#### Github
+1
View File
@@ -11,6 +11,7 @@ Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestboo
#### Reference
- http://packetstormsecurity.org/1001-exploits/simplephpgb-xss.txt
- http://www.exploit-db.com/exploits/11077
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is
#### Reference
- http://packetstormsecurity.org/1003-exploits/onecmsv25-sql.txt
- http://www.exploit-db.com/exploits/11635
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in start.php in Eros Webkatalog allows remote attack
#### Reference
- http://packetstormsecurity.org/1003-exploits/eroserotikwebkat-sql.txt
- http://www.exploit-db.com/exploits/11689
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web roo
#### Reference
- http://packetstormsecurity.org/1001-exploits/awcm-backup.txt
- http://www.exploit-db.com/exploits/11025
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic
#### Reference
- http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt
- http://www.exploit-db.com/exploits/11876
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-1712](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1712)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information.
### POC
#### Reference
- http://www.exploit-db.com/exploits/12323
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions Syste
#### Reference
- http://packetstormsecurity.org/1003-exploits/ppwb-sql.txt
- http://www.exploit-db.com/exploits/11816
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote att
#### Reference
- http://packetstormsecurity.org/1005-exploits/teknoportal-sql.txt
- http://www.exploit-db.com/exploits/12552
#### Github
No PoCs found on GitHub currently.
+1 -1
View File
@@ -10,7 +10,7 @@ UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 th
### POC
#### Reference
No PoCs from references.
- http://www.exploit-db.com/exploits/13853
#### Github
- https://github.com/0bfxgh0st/cve-2010-2075
+1 -1
View File
@@ -10,7 +10,7 @@ Directory traversal vulnerability in the JE Quotation Form (com_jequoteform) com
### POC
#### Reference
No PoCs from references.
- http://www.exploit-db.com/exploits/12607
#### Github
- https://github.com/20142995/nuclei-templates
+1
View File
@@ -11,6 +11,7 @@ Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat
#### Reference
- http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
- http://www.exploit-db.com/exploits/10983
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script
#### Reference
- http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
- http://www.exploit-db.com/exploits/10983
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-2312](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2312)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
SQL injection vulnerability in index.php in HauntmAx Haunted House Directory Listing CMS allows remote attackers to execute arbitrary SQL commands via the state parameter in a listings action.
### POC
#### Reference
- http://www.exploit-db.com/exploits/13784
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execu
#### Reference
- http://packetstormsecurity.org/1006-exploits/rosoft444-overflow.txt
- http://www.exploit-db.com/exploits/13895
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-2623](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2623)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
SQL injection vulnerability in pages.php in Internet DM Specialist Bed and Breakfast allows remote attackers to execute arbitrary SQL commands via the pp_id parameter.
### POC
#### Reference
- http://www.exploit-db.com/exploits/14144
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-2719](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2719)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.
### POC
#### Reference
- http://www.exploit-db.com/exploits/14199
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) compo
#### Reference
- http://packetstormsecurity.org/1007-exploits/joomlagolfcourseguide-sql.txt
- http://www.exploit-db.com/exploits/14448
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows
#### Reference
- http://packetstormsecurity.org/1008-exploits/tycoonrecord-sql.txt
- http://www.exploit-db.com/exploits/14572
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-3126](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3126)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc90loc.dll that is located in the same folder as an avast license (.avastlic) file.
### POC
#### Reference
- http://www.exploit-db.com/exploits/14743
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microso
#### Reference
- http://www.exploit-db.com/exploits/14765
- http://www.exploit-db.com/exploits/14788
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4956.php
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-014
+1 -1
View File
@@ -10,7 +10,7 @@ Untrusted search path vulnerability in Microsoft Windows Internet Communication
### POC
#### Reference
No PoCs from references.
- http://www.exploit-db.com/exploits/14780
#### Github
- https://github.com/ARPSyndicate/cve-scores
+1
View File
@@ -11,6 +11,7 @@ Directory traversal vulnerability in download.php in EnergyScripts (ES) Simple D
#### Reference
- http://packetstormsecurity.org/1009-exploits/essimpledownload-lfi.txt
- http://www.exploit-db.com/exploits/14960
#### Github
No PoCs found on GitHub currently.
+2
View File
@@ -10,7 +10,9 @@ Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6
### POC
#### Reference
- http://www.exploit-db.com/exploits/15341
- http://www.exploit-db.com/exploits/15342
- http://www.exploit-db.com/exploits/15352
- http://www.ubuntu.com/usn/USN-1011-2
- https://bugzilla.mozilla.org/show_bug.cgi?id=607222
- https://bugzilla.mozilla.org/show_bug.cgi?id=607222#c53
+1 -1
View File
@@ -10,7 +10,7 @@ The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for
### POC
#### Reference
No PoCs from references.
- http://www.exploit-db.com/exploits/15774/
#### Github
- https://github.com/0xTo/linux-kernel-exploits
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-4366](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4366)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2) thread_description parameters in a message.
### POC
#### Reference
- http://www.exploit-db.com/exploits/15543
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-4598](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4598)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.
### POC
#### Reference
- http://www.exploit-db.com/exploits/15802
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-4876](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4876)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter.
### POC
#### Reference
- http://www.exploit-db.com/exploits/14849
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote at
#### Reference
- http://packetstormsecurity.org/1009-exploits/ablog-sql.txt
- http://www.exploit-db.com/exploits/14894
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-4929](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4929)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
SQL injection vulnerability in the Joostina (com_ezautos) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php.
### POC
#### Reference
- http://www.exploit-db.com/exploits/15085
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-4944](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4944)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.
### POC
#### Reference
- http://www.exploit-db.com/exploits/15100
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 a
#### Reference
- http://packetstormsecurity.org/1007-exploits/reservelogic-sql.txt
- http://www.exploit-db.com/exploits/14163
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2010-5239](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5239)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users to gain privileges via a Trojan horse mfc80loc.dll file in the current working directory, as demonstrated by a directory that contains a .mds file. NOTE: some of these details are obtained from third party information.
### POC
#### Reference
- http://www.exploit-db.com/exploits/14791/
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to exec
#### Reference
- http://packetstormsecurity.com/files/125723/MicroP-0.1.1.1600-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/14720
- http://www.exploit-db.com/exploits/17502
- http://www.exploit-db.com/exploits/32261
+1 -1
View File
@@ -10,7 +10,7 @@ Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute ar
### POC
#### Reference
No PoCs from references.
- http://www.exploit-db.com/exploits/15834
#### Github
- https://github.com/ARPSyndicate/cvemon
+1
View File
@@ -10,6 +10,7 @@ The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) com
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
- http://rhn.redhat.com/errata/RHSA-2013-1437.html
- http://www.csoonline.com/article/692366/widely-used-encryption-standard-is-insecure-say-experts
+1 -1
View File
@@ -12,7 +12,7 @@ The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in
### POC
#### Reference
No PoCs from references.
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
- https://github.com/Live-Hack-CVE/CVE-2011-2487
+1
View File
@@ -10,6 +10,7 @@ VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x be
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
#### Github
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2011-2908](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2908)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2011-4575](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4575)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -10,6 +10,7 @@ The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
- https://issues.jboss.org/browse/JBCACHE-1612
#### Github
+1
View File
@@ -10,6 +10,7 @@ The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBos
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
- http://www.exploit-db.com/exploits/30211
#### Github
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2012-2377](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2377)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
No PoCs found on GitHub currently.
+1 -1
View File
@@ -10,7 +10,7 @@ Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when
### POC
#### Reference
No PoCs from references.
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
- https://github.com/n0-traces/cve_monitor
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2012-3369](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3369)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
No PoCs found on GitHub currently.
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2012-3370](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3370)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 returns the credentials of the previous user when a security context is not provided, which allows remote attackers to gain privileges as other users.
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
No PoCs found on GitHub currently.
+1 -1
View File
@@ -10,7 +10,7 @@ org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and
### POC
#### Reference
No PoCs from references.
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
- https://github.com/ARPSyndicate/cve-scores
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2012-5478](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5478)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intended role restrictions and perform arbitrary JMX operations via unspecified vectors.
### POC
#### Reference
- http://rhn.redhat.com/errata/RHSA-2013-0193.html
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -10,6 +10,7 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting,
### POC
#### Reference
- http://www.exploit-db.com/exploits/33370
- https://www.elastic.co/blog/logstash-1-4-3-released
- https://www.elastic.co/community/security/
+1
View File
@@ -11,6 +11,7 @@ The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows
#### Reference
- https://devicereversing.wordpress.com/2016/11/07/eirs-d1000-modem-is-wide-open-to-being-hacked/
- https://ghostbin.com/paste/q2vq2
- https://isc.sans.edu/forums/diary/TR069+NewNTPServer+Exploits+What+we+know+so+far/21763/
#### Github
+1
View File
@@ -10,6 +10,7 @@ MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contai
### POC
#### Reference
- https://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/
- https://www.exploit-db.com/exploits/41471
#### Github
+1 -1
View File
@@ -10,7 +10,7 @@ An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Serie
### POC
#### Reference
No PoCs from references.
- https://ghostbin.com/paste/q2vq2
#### Github
- https://github.com/1f3lse/taiE
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2017-7923](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7923)
![](https://img.shields.io/static/v1?label=Product&message=Hikvision%20Cameras&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Hikvision%20Cameras%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-260&color=brightgreen)
### Description
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The password in configuration file vulnerability could allow a malicious user to escalate privileges or assume the identity of another user and access sensitive information.
### POC
#### Reference
- https://ghostbin.com/paste/q2vq2
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -10,6 +10,7 @@ PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows loca
### POC
#### Reference
- http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi
- https://www.exploit-db.com/exploits/46708
#### Github
+1
View File
@@ -10,6 +10,7 @@ PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows loca
### POC
#### Reference
- http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi
- https://www.exploit-db.com/exploits/46709
#### Github
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2023-42179](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42179)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
### Description
Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.
### POC
#### Reference
- https://github.com/johndoe31415/doorbird-kdf-vulnerability
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -6,6 +6,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20AI%202.16&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.17&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.18&color=blue)
+1
View File
@@ -18,6 +18,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.0%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -9,6 +9,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.0%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
+1
View File
@@ -7,6 +7,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
+1
View File
@@ -14,6 +14,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.0%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -18,6 +18,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -21,6 +21,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -20,6 +20,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20JBoss%20Core%20Services%202.4.62.SP2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -21,6 +21,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20JBoss%20Core%20Services%202.4.62.SP2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -14,6 +14,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.0%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+2 -2
View File
@@ -1,11 +1,11 @@
### [CVE-2025-53811](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53811)
![](https://img.shields.io/static/v1?label=Product&message=Mosh-Pro&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.3.2%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=0.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-276%20Incorrect%20Default%20Permissions&color=brightgreen)
### Description
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions. Acquired resource access is limited to previously granted permissions by the user. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Mosh-Pro, potentially disguising attacker's malicious intent. This issue was detected in 1.3.2 version of Mosh-Pro. Since authors did not respond to messages from CNA, patching status is unknown.
The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileged access to execute arbitrary code that inherits Mosh-Pro TCC (Transparency, Consent, and Control) permissions. Acquired resource access is limited to previously granted permissions by the user. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of Mosh-Pro, potentially disguising attacker's malicious intent. This issue was fixed in 1.3.7 version of Mosh-Pro.
### POC
+1
View File
@@ -20,6 +20,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
+1
View File
@@ -8,6 +8,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.2%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
+1
View File
@@ -19,6 +19,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20JBoss%20Core%20Services%202.4.62.SP2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -3,6 +3,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.16&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.17&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.18&color=blue)
+1
View File
@@ -21,6 +21,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -14,6 +14,7 @@ In TOTOLINK X15 1.0.0-B20230714.1105 wurde eine kritische Schwachstelle gefunden
#### Reference
- https://github.com/panda666-888/vuls/blob/main/totolink/x15/formFilter_ip6addr.md
- https://github.com/panda666-888/vuls/blob/main/totolink/x15/formFilter_url.md
- https://vuldb.com/?ctiid.317830
- https://vuldb.com/?submit.622665
#### Github
+1
View File
@@ -2,6 +2,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010.0%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207%20Extended%20Lifecycle%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208.4%20Advanced%20Mission%20Critical%20Update%20Support&color=blue)
+1 -1
View File
@@ -5,7 +5,7 @@
### Description
The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database.
### POC
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2026-13214](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13214)
![](https://img.shields.io/static/v1?label=Product&message=zephyr&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=4.3.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=memory-safety&color=brightgreen)
### Description
The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request from the central system, the handler copied the attacker-controlled JSON "key" string into the caller's fixed 50-byte stack buffer (skey[CISTR50], declared in subsys/net/lib/ocpp/ocpp.c) using an unbounded strcpy(). The parsed key value points directly into the receive buffer, so its length is bounded only by the message size (CONFIG_OCPP_RECV_BUFFER_SIZE, default 2048).The GetConfiguration message is delivered over the WebSocket connection that the charge point opens to its configured central system. The reader thread ocpp_wsreader() reads the message into ui->recv_buf and dispatches it to parse_getconfig_msg() via the PDU function table. An attacker who controls the central system endpoint, or a man-in-the-middle on an unencrypted connection, can send a GetConfiguration request whose "key" field exceeds 50 bytes and overflow the reader thread's stack with attacker-chosen bytes.The consequence is a remotely triggerable stack smash on the OCPP reader thread: at minimum a denial of service, and plausibly remote code execution depending on build-time hardening such as stack canaries and MPU configuration. The fix replaces the strcpy() with a bounded strncpy(key, payload.key[0], CISTR50 - 1) followed by explicit NUL termination, matching the bounded copies already used by the sibling handlers.
### POC
#### Reference
- https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fqhf-6v24-4px2
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -12,6 +12,7 @@ A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the fu
#### Reference
- https://github.com/seladb/PcapPlusPlus/issues/2152
- https://github.com/user-attachments/files/28214571/poc.zip
#### Github
No PoCs found on GitHub currently.
+18
View File
@@ -0,0 +1,18 @@
### [CVE-2026-13611](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13611)
![](https://img.shields.io/static/v1?label=Product&message=KiviCare&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)
### Description
The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key.
### POC
#### Reference
- https://wpscan.com/vulnerability/b3f986c8-fa7f-4115-9f33-7e74180256f1/
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -10,6 +10,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.22&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Update%20Infrastructure%205&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
+2 -1
View File
@@ -1,6 +1,7 @@
### [CVE-2026-14380](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14380)
![](https://img.shields.io/static/v1?label=Product&message=DBI&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=null&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-470%20Use%20of%20Externally-Controlled%20Input%20to%20Select%20Classes%20or%20Code%20('Unsafe%20Reflection')&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-95%20Improper%20Neutralization%20of%20Directives%20in%20Dynamically%20Evaluated%20Code%20(Eval%20Injection)&color=brightgreen)
### Description
+1
View File
@@ -18,6 +18,7 @@ A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impac
#### Reference
- https://github.com/radareorg/radare2/issues/26047
- https://vuldb.com/submit/850386
#### Github
No PoCs found on GitHub currently.
+2
View File
@@ -20,6 +20,8 @@ A vulnerability has been found in Leantime up to 3.8.0. This impacts the functio
#### Reference
- https://bytium.com/insights/leantime-priv-escalation-vulnerability-low-priv-to-owner
- https://vuldb.com/vuln/377838
- https://vuldb.com/vuln/377838/cti
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -3,6 +3,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.4%20Update%20Services%20for%20SAP%20Solutions&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Allocation%20of%20Resources%20Without%20Limits%20or%20Throttling&color=brightgreen)
+1 -1
View File
@@ -5,7 +5,7 @@
### Description
OpenMetadata is a unified metadata platform. Versions prior to 1.11.4 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.
OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection (SSTI) in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch.
### POC
+1
View File
@@ -14,6 +14,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.15&color=blue)
+1
View File
@@ -23,6 +23,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1 -1
View File
@@ -7,7 +7,7 @@
### Description
LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE without user opt-in. At time of publication, there are no publicly available patches.
LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE without user opt-in. Version 0.13.0 patches the issue.
### POC
+1
View File
@@ -22,6 +22,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209.6%20Extended%20Update%20Support&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Insights%20proxy%201.5&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.12&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.13&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20OpenShift%20Container%20Platform%204.14&color=blue)
+1
View File
@@ -1,4 +1,5 @@
### [CVE-2026-56211](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56211)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20AI%20Inference%20Server%203.2&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20AI%20Inference%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
+28
View File
@@ -0,0 +1,28 @@
### [CVE-2026-5680](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5680)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Data%20Grid%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Fuse%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20JBoss%20Enterprise%20Application%20Platform%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20JBoss%20Enterprise%20Application%20Platform%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20JBoss%20Enterprise%20Application%20Platform%20Expansion%20Pack&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Process%20Automation%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Single%20Sign-On%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20build%20of%20Apache%20Camel%20-%20HawtIO%204&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20build%20of%20Apache%20Camel%20for%20Spring%20Boot%204&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Allocation%20of%20Resources%20Without%20Limits%20or%20Throttling&color=brightgreen)
### Description
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.
### POC
#### Reference
- https://bugzilla.redhat.com/show_bug.cgi?id=2455350
#### Github
No PoCs found on GitHub currently.
+2 -1
View File
@@ -1,11 +1,12 @@
### [CVE-2026-5704](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5704)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Discovery%202&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%2010&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%206&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%207&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Hardened%20Images&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type&color=brightgreen)
### Description
+1
View File
@@ -4,6 +4,7 @@
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%208&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Red%20Hat%20Enterprise%20Linux%209&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=null&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=3.3.1%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Integer%20Underflow%20(Wrap%20or%20Wraparound)&color=brightgreen)
+1
View File
@@ -12,6 +12,7 @@ PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorizatio
#### Reference
- https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-jf2m-hpj9-4qx2
- https://tpaidakis.com/writeups/passwordpusher-nil-authorization/
#### Github
No PoCs found on GitHub currently.
+1
View File
@@ -11,6 +11,7 @@ PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of c
### POC
#### Reference
- https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/7a3a6bbf153a03fa3a9413afc60bded6b764e76b
- https://github.com/PHPCSStandards/PHP_CodeSniffer/pull/1473
#### Github
+17
View File
@@ -0,0 +1,17 @@
### [CVE-2026-74916](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74916)
![](https://img.shields.io/static/v1?label=Product&message=WP%20Fastest%20Cache&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0.8.7.7%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-349%20Acceptance%20of%20Extraneous%20Untrusted%20Data%20With%20Trusted%20Data&color=brightgreen)
### Description
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.
### POC
#### Reference
- https://wpscan.com/vulnerability/b6f8be96-13d9-497a-8e57-5a65b519958b/
#### Github
No PoCs found on GitHub currently.
+18
View File
@@ -0,0 +1,18 @@
### [CVE-2026-75132](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-75132)
![](https://img.shields.io/static/v1?label=Product&message=WAPT&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.6.1.17852%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=2.6.x%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')&color=brightgreen)
### Description
WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting the injection point, an attacker can inject additional PostgreSQL statements, bypass the host scope restrictions applied to the account, and read information from other rows or tables within the database.
### POC
#### Reference
- https://www.wapt.fr/en/doc/wapt-changelog.html
#### Github
No PoCs found on GitHub currently.
Loaded 100 of 140 files, more files were not shown because too many files have changed in this diff. Show more