mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 12:38:17 -10:00
Update Tue Jun 30 18:01:39 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
34185e502a
commit
e3f4d93d13
312 files changed
+3242
-132
No files matched your search
@@ -0,0 +1,17 @@
|
||||
### [CVE-2015-3356](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3356)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Multiple cross-site request forgery (CSRF) vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests that (1) enable or (2) disable modules or (3) change variables via unspecified vectors.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.drupal.org/node/2407321
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2015-3358](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3358)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a destination parameter, related to callbacks that (1) enable and disable modules or (2) change variables.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.drupal.org/node/2407321
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2019-12131](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12131)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID parameter in an HTTP header, an attacker may impersonate an arbitrary existing user without any authentication. All APPC and SDC setups are affected.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://jira.onap.org/browse/OJSI-93
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://jira.percona.com/browse/PS-7358
|
||||
- https://www.percona.com/blog/2020/10/13/percona-distribution-for-mysql-pxc-variant-8-0-20-fixes-for-security-vulnerability-release-roundup-october-13-2020/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -15,6 +15,7 @@ A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid E
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,7 +11,7 @@ A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcen
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
- https://github.com/Live-Hack-CVE/CVE-2020-26990
|
||||
|
||||
@@ -11,7 +11,7 @@ A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcen
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
- https://github.com/Live-Hack-CVE/CVE-2020-26991
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-26998](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26998)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information. (ZDI-CAN-12040)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-26999](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26999)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information. (ZDI-CAN-12042)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27000](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27000)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing BMP files. This can result in a memory corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12018)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27001](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27001)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12041)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27002](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27002)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12043)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27003](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27003)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing TIFF files. This could lead to pointer dereferences of a value obtained from untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12158)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27004](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27004)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of CGM files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12163)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27005](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27005)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of TGA files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12178)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27006](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27006)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PCT files. This could result in a memory corruption condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12182)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27007](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27007)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of HPG files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12207)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27008](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27008)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of PLT files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12209)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -15,6 +15,7 @@ A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Solid E
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-979834.pdf
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-28394](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28394)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker could leverage this vulnerability to access data in the context of the current process. (ZDI-CAN-12283)
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-25173](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25173)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-25174](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25174)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-25175](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25175)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-25176](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25176)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-25177](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25177)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2021-25178](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25178)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -22,6 +22,7 @@ Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based
|
||||
- https://www.oracle.com//security-alerts/cpujul2021.html
|
||||
- https://www.oracle.com/security-alerts/cpuapr2022.html
|
||||
- https://www.oracle.com/security-alerts/cpuoct2021.html
|
||||
- https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156
|
||||
|
||||
#### Github
|
||||
- https://github.com/0day404/vulnerability-poc
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2022-0852](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0852)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the privileges of the Red Hat account in question, but it could affect the integrity, availability, and/or data confidentiality of other systems that are administered by that account. This occurs regardless of how the password is supplied to convert2rhel.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.redhat.com/browse/RHELC-432
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ When a POST request comes through AJP and the request exceeds the max-post-size
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://issues.redhat.com/browse/UNDERTOW-2133
|
||||
|
||||
#### Github
|
||||
- https://github.com/muneebaashiq/MBProjects
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2022-36311](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36311)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://helpdesk.airspan.com/browse/TRN3-1694
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ An out of bounds read exists in libjxl. An attacker using a specifically crafted
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://www.openwall.com/lists/oss-security/2026/06/29/3
|
||||
|
||||
#### Github
|
||||
- https://github.com/11notes/docker-paperless-ngx
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2023-1161](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1161)
|
||||
|
||||
|
||||
|
||||
%20in%20Wireshark&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gitlab.com/wireshark/wireshark/-/issues/18839
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
@@ -16,6 +16,7 @@ In codelyfe Stupid Simple CMS bis 1.2.4 wurde eine kritische Schwachstelle gefun
|
||||
|
||||
#### Reference
|
||||
- https://github.com/g1an123/POC/blob/main/Unauthorized%20file%20upload%20getshell.md
|
||||
- https://vuldb.com/?ctiid.248260
|
||||
- https://vuldb.com/?id.248260
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -31,7 +31,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -18,7 +18,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -6,7 +6,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -5,7 +5,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,6 +4,8 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -5,7 +5,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,5 +1,6 @@
|
||||
### [CVE-2024-21490](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21490)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -7,7 +8,7 @@
|
||||
|
||||
### Description
|
||||
|
||||
This affects versions of the package angular from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. ␍␍␍**Note:**␍␍This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core).
|
||||
This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split the value of the ng-srcset directive is vulnerable to super-linear runtime due to backtracking. With large carefully-crafted input, this can result in catastrophic backtracking and cause a denial of service. ␍␍␍**Note:**␍␍This package is EOL and will not receive any updates to address this issue. Users should migrate to [@angular/core](https://www.npmjs.com/package/@angular/core).
|
||||
|
||||
### POC
|
||||
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2024-34045](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34045)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment().
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://jira.o-ran-sc.org/browse/RIC-1047
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2024-34046](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34046)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment().
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://jira.o-ran-sc.org/browse/RIC-1047
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -2,7 +2,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -20,7 +20,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -2,7 +2,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -10,7 +10,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -14,7 +14,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -1,4 +1,5 @@
|
||||
### [CVE-2025-10911](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10911)
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -15,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -6,7 +6,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -3,7 +3,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -20,7 +20,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -17,7 +17,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
|
||||
@@ -0,0 +1,26 @@
|
||||
### [CVE-2025-2251](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2251)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://issues.redhat.com/browse/WFLY-20550
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -5,6 +5,7 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -16,7 +16,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -13,7 +13,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -14,7 +14,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -13,7 +13,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -7,7 +7,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -7,7 +7,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -7,7 +7,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -15,7 +15,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -7,7 +7,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -15,7 +15,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -15,7 +15,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -13,7 +13,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -9,7 +9,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
Loaded 100 of 312 files, more files were not shown because too many files have changed in this diff.
Show more
Reference in new issue
Block a user