mirror of
https://github.com/trickest/cve.git
synced 2026-11-07 04:29:23 -10:00
Update Sat Mar 28 11:16:01 UTC 2026
This commit is contained in:
trickest-workflows committed
1 parent
f012a1170a
commit
fac668182b
65 files changed
+652
-10
No files matched your search
@@ -10,7 +10,7 @@ Use-after-free vulnerability in the SplObjectStorage unserializer in PHP 5.2.x a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- http://pastebin.com/mXGidCsd
|
||||
|
||||
#### Github
|
||||
- https://github.com/Farrhouq/Inpt-report
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2013-3697](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3697)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Windows Server 2008 and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 might allow local users to gain privileges via a crafted 0x1439EB IOCTL call.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://pastebin.com/RcS2Bucg
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2013-3956](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3956)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- http://pastebin.com/GB4iiEwR
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ The SAP Netweaver Business Warehouse component does not properly restrict access
|
||||
|
||||
#### Reference
|
||||
- http://packetstormsecurity.com/files/127671/SAP-Netweaver-Business-Warehouse-Missing-Authorization.html
|
||||
- https://service.sap.com/sap/support/notes/1974016
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadge
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://pastebin.com/gNCc8aYm
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cvemon
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2017-18046](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18046)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login_action.cgi (aka cgipage.cgi).
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/Yxd9S46A
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2020-17494](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17494)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Untangle Firewall NG before 16.0 uses MD5 for passwords.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/s7UYG3vX
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2020-27366](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27366)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/sr0JR1ys
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute ar
|
||||
|
||||
#### Reference
|
||||
- https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.2/SPIP_4.1.2_AUTH_RCE/SPIP_4.1.2_AUTH_RCE_Abyss_Watcher_12_07_22.md
|
||||
- https://pastebin.com/ZH7CPc8X
|
||||
- https://spawnzii.github.io/posts/2022/07/how-we-have-pwned-root-me-in-2022/
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2022-43363](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43363)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties have been unable to discern any relationship between the Pastebin information and a possible XSS finding.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/72MRwNXW
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://pastebin.com/z5MD3z8c
|
||||
|
||||
#### Github
|
||||
- https://github.com/mha98/CVE-2022-45003
|
||||
|
||||
@@ -10,7 +10,7 @@ Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vu
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://pastebin.com/z5MD3z8c
|
||||
|
||||
#### Github
|
||||
- https://github.com/mha98/CVE-2022-45004
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2023-46725](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46725)
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vulnerable to server-side request forgery. In the Network module, a manufacturer account can use the `/api/updateProducts.json` endpoint to make the server send a request to an arbitrary host. This means that the server can be used as a proxy into the internal network where the server is. Furthermore, the checks on a valid image are not adequate, leading to a time of check time of use issue. For example, by using a custom server that returns 200 on HEAD requests, then return a valid image on first GET request and then a 302 redirect to final target on second GET request, the server will copy whatever file is at the redirect destination, making this a full SSRF. Version 3.6.1 fixes this vulnerability.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/8K5Brwbq
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,7 +11,7 @@ Cross Site Scripting vulnerability in Campcodes Online Marriage Registration Sys
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://pastebin.com/CYMDR4ss
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2024-39033](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39033)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In Newgensoft OmniDocs 11.0_SP1_03_006, Insecure Direct Object Reference (IDOR) in the getuserproperty function allows user's configuration and PII to be stolen.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/SHExsfh6
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,7 +10,7 @@ An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attack
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://pastebin.com/9dc4LYGA
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -1,6 +1,5 @@
|
||||
### [CVE-2024-48061](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-48061)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@@ -10,7 +10,7 @@ In MindManager Windows versions prior to 24.1.150, attackers could potentially w
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://pastebin.com/Ax078JVF
|
||||
|
||||
#### Github
|
||||
- https://github.com/fkie-cad/nvd-json-data-feeds
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-15445](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15445)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability checks, allowing any logged-in user, like subscriber, to perform privileged operations. An attacker can install and activate a from a user-supplied URL, leading to arbitrary PHP code execution, and also import demo content that rewrites site configuration, including Restaurant Cafeteria WordPress theme through 0.4.6_mods, pages, menus, and front page settings.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://wpscan.com/vulnerability/f3f4a734-5828-4e3f-a170-28189aeda929/
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -12,7 +12,7 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
No PoCs from references.
|
||||
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rmm7-r7wr-xpfg
|
||||
|
||||
#### Github
|
||||
- https://github.com/ARPSyndicate/cve-scores
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
### [CVE-2025-30075](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-30075)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they could write DLL files to directories within victims' DLL search paths.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://pastebin.com/5CaNfyGH
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.0
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EZdYNxRd8ilMrCRXLnltUKEBiBXJzrTc9i7Y643cuho9PA?e=7Bifxw
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56079.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attacker
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56082.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,8 @@ OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PR
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EdfdfnvOxAhJqdeIGlRRo6ABHJz03PPPBYIMdLoD6iNhlg?e=qNhi6o
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56084.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_1
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EuESCSUsYvtAtfW1SfmGGxsBw-kN9iCbpnUU9T8TXofH3w?e=kp5OXK
|
||||
- https://1drv.ms/t/c/12406a392c92914b/ERuoK3MLW2RLpQ6qOoGs5wIB73tNnsDzRT8U6U6z4VmskQ?e=KIjaOa
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -11,6 +11,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_1
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EuESCSUsYvtAtfW1SfmGGxsBw-kN9iCbpnUU9T8TXofH3w?e=kp5OXK
|
||||
- https://1drv.ms/t/c/12406a392c92914b/ETgTxS2wFBlCjG4DP56-PjkBWwvraLHZ-BVaWh9Vs9_SuA?e=aTbjEe
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56086.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attacker
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56087.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,8 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EQ5pK82-KmxKht6YgsEzaOsBzrC05Cael1vwpfM9ZxX97Q?e=qEgmtB
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56088.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM
|
||||
- https://1drv.ms/t/c/12406a392c92914b/Ea56irtVj4dNs59Pzz7fkiIBQeVLjDcMDEXC2FpCQydIZQ?e=70gcOe
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56089.md
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EfSHWqE3N11FpgQsV1BlZk0BxXIhFQjIp_xmJYIq1APvrw?e=JCIm6k
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56090.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_102231
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EgUg1zJuaItDmLxZhkCg4B8BcJTRYnXyX4ePIIjNoZrRew?e=a23cK6
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EdiWfxSbC0pAu_oksKjm2xgBXSCavYBBJt8V51JkcH4Dsw?e=OhOVCN
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56091.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allo
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EaD98URfTfFKm1v_MTfU-UEBUxRf5vj3O0x7fhabn5_l9A?e=BuNPV9
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56091.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowin
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/Edoz9sBTjeJMqw8K0f3lWgMBNxBlpE9IIUwOX2h2S1cMhw?e=46VlOq
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56092.md
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56093.md
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attacker
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56096.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PR
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56097.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowin
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EYC9-EvSxKZOum9kuAtPDq4BjKb0c8IV6B52lDEAD33pEA?e=2C0BKO
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56098.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,8 @@ OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allo
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EjgEtJ5yojhDpEoT-PbidhsBzsbVnT-D-32qK1bCrQN3-g?e=cVRYgN
|
||||
- https://1drv.ms/t/c/12406a392c92914b/ETaD7apCrPFLtMj473NHV2gBaYrKV9A4ZZKMfyWgC949Zw?e=iyjx5g
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56099.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,8 @@ OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EbNlU_0K0v1Krzq7CaUWn0AB_yu3ICrdmwoVuS2txFGMhA?e=0gIUMh
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56101.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_102231
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EgUg1zJuaItDmLxZhkCg4B8BcJTRYnXyX4ePIIjNoZrRew?e=a23cK6
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EXNcf0lLKjZLv6U4-ErArMkBKqwLJhJbiJwuQl5MSd0W3w?e=GfXnnz
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56102.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_102231
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EgUg1zJuaItDmLxZhkCg4B8BcJTRYnXyX4ePIIjNoZrRew?e=a23cK6
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EcUP8SMciOVBgNEy31-OnnkBQRk_fUCDWUtdDX8UBfbXEA?e=FuQDPi
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56106.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attacker
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56107.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56109.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56110.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
- https://1drv.ms/t/c/12406a392c92914b/ERJa0DnnR29MqtbLLRQirGYB4qA9dAdpn6eIJH9LwNlBmw?e=y6KkGo
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56111.md
|
||||
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST2
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EY_XOykAOvJJkGsDkmahTboBmmvNWczbXF3brroYsTWmTA?e=2Itzta
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56113.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 a
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56114.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowin
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/t/c/12406a392c92914b/Ed2lBCN9vhdPnEs7WKvpfEQBp7czazgO9PYxS2TFSHx7TQ?e=HZZaGq
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56117.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,8 @@ OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PR
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EZOBtzLwlmBKschv6sxT_LcBBKnMP_OXO7d24321UD8x8g?e=Dpui5j
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56122.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -11,6 +11,7 @@ OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.0
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EWnUygFXeTVNigjp81gJ3LQBJ-hCSb_Yq4gGIMxlan7uJg?e=emOIoc
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56124.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attacker
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56127.md
|
||||
|
||||
#### Github
|
||||
|
||||
@@ -10,6 +10,7 @@ OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
- https://1drv.ms/t/c/12406a392c92914b/EaJ2e_mzgltOiHqb4t8xIvgBoT2CYEP0nrhZd7IYlCHSPQ?e=miUrrL
|
||||
- https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56129.md
|
||||
|
||||
|
||||
@@ -19,6 +19,7 @@ In risesoft-y9 Digital-Infrastructure bis 9.6.7 wurde eine kritische Schwachstel
|
||||
|
||||
#### Reference
|
||||
- https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250621-01.md
|
||||
- https://vuldb.com/?ctiid.315019
|
||||
|
||||
#### Github
|
||||
- https://github.com/ShenxiuSec/cve-proofs
|
||||
|
||||
@@ -0,0 +1,53 @@
|
||||
### [CVE-2026-20872](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20872)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
&color=blue)
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-20872-detection-script-spoofing-vulnerability-in-windows-ntlm
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-20872-mitigation-script-spoofing-vulnerability-in-windows-ntlm
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,50 @@
|
||||
### [CVE-2026-21253](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21253)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
&color=blue)
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-21253-detection-script-elevation-of-privilege-vulnerability-in-mailslot-file-system
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-21253-mitigation-script-elevation-of-privilege-vulnerability-in-mailslot-file-system
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,50 @@
|
||||
### [CVE-2026-21513](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21513)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
&color=blue)
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-21513-detection-script-security-feature-bypass-vulnerability-in-mshtml-framework
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-21513-mitigation-script-security-feature-bypass-vulnerability-in-mshtml-framework
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,49 @@
|
||||
### [CVE-2026-21533](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21533)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
&color=blue)
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-21533-detection-script-privilege-escalation-vulnerability-in-windows-remote-desktop
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-2180](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2180)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was identified in Tenda RX3 16.03.13.11. Affected is an unknown function of the file /goform/fast_setting_wifi_set. Such manipulation of the argument ssid_5g leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://vuldb.com/?ctiid.344883
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-2271](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2271)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in the read_creator_block() function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory allocation without proper validation, leading to a heap overflow and an out-of-bounds write. Successful exploitation could result in an application level denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.redhat.com/show_bug.cgi?id=2438429
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
### [CVE-2026-2272](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2272)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://bugzilla.redhat.com/show_bug.cgi?id=2438428
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -6,7 +6,6 @@
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
@@ -0,0 +1,49 @@
|
||||
### [CVE-2026-24294](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24294)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
&color=blue)
|
||||
&color=blue)
|
||||
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
&color=blue)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-24294-detection-script-improper-authentication-vulnerability-in-windows-smb-server
|
||||
- https://www.vicarius.io/vsociety/posts/cve-2026-24294-mitigation-script-improper-authentication-vulnerability-in-windows-smb-server
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-33870](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33870)
|
||||
|
||||
|
||||
|
||||
&color=brightgreen)
|
||||
|
||||
### Description
|
||||
|
||||
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Versions 4.1.132.Final and 4.2.10.Final fix the issue.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://w4ke.info/2025/06/18/funky-chunks.html
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-33896](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33896)
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions. This allows any leaf certificate (without these extensions) to act as a CA and sign other certificates, which node-forge will accept as valid. Version 1.4.0 patches the issue.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90
|
||||
- https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -0,0 +1,18 @@
|
||||
### [CVE-2026-4968](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4968)
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### Description
|
||||
|
||||
A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an unknown function of the file diary.php. Executing a manipulation can lead to cross-site request forgery. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
|
||||
|
||||
### POC
|
||||
|
||||
#### Reference
|
||||
- https://gist.github.com/Mohdanass/50a525ba0a72e10fda85f0db11eeed92
|
||||
|
||||
#### Github
|
||||
No PoCs found on GitHub currently.
|
||||
|
||||
@@ -20181,6 +20181,7 @@ CVE-2010-2186 - http://www.redhat.com/support/errata/RHSA-2010-0470.html
|
||||
CVE-2010-2187 - http://www.redhat.com/support/errata/RHSA-2010-0470.html
|
||||
CVE-2010-2188 - http://www.redhat.com/support/errata/RHSA-2010-0470.html
|
||||
CVE-2010-2208 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7188
|
||||
CVE-2010-2225 - http://pastebin.com/mXGidCsd
|
||||
CVE-2010-2226 - http://www.ubuntu.com/usn/USN-1000-1
|
||||
CVE-2010-2226 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html
|
||||
CVE-2010-2227 - http://www.vmware.com/security/advisories/VMSA-2011-0003.html
|
||||
@@ -28033,6 +28034,7 @@ CVE-2013-3690 - http://seclists.org/fulldisclosure/2013/Jun/84
|
||||
CVE-2013-3691 - http://seclists.org/fulldisclosure/2013/Jun/84
|
||||
CVE-2013-3691 - https://www.youtube.com/watch?v=2UCAHSVqfuE
|
||||
CVE-2013-3693 - http://btsc.webapps.blackberry.com/btsc/viewdocument.do;jsessionid=1C7CE6911426BCFAF2A80C3834F4DF0F?externalId=KB35139&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
|
||||
CVE-2013-3697 - http://pastebin.com/RcS2Bucg
|
||||
CVE-2013-3718 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-3718
|
||||
CVE-2013-3720 - http://www.darksecurity.de/advisories/2013/SSCHADV2013-004.txt
|
||||
CVE-2013-3721 - http://packetstormsecurity.com/files/120976/PsychoStats-3.2.2b-Blind-SQL-Injection.html
|
||||
@@ -28167,6 +28169,7 @@ CVE-2013-3918 - http://www.darkreading.com/vulnerability/new-ie-vulnerability-fo
|
||||
CVE-2013-3928 - http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html
|
||||
CVE-2013-3928 - http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html
|
||||
CVE-2013-3928 - http://www.exploit-db.com/exploits/27609
|
||||
CVE-2013-3956 - http://pastebin.com/GB4iiEwR
|
||||
CVE-2013-3960 - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18896
|
||||
CVE-2013-3961 - http://packetstormsecurity.com/files/121978/Simple-PHP-Agenda-2.2.8-SQL-Injection.html
|
||||
CVE-2013-3961 - http://seclists.org/fulldisclosure/2013/Jun/67
|
||||
@@ -32060,6 +32063,7 @@ CVE-2014-5171 - http://packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-
|
||||
CVE-2014-5172 - http://packetstormsecurity.com/files/127670/SAP-HANA-XS-Administration-Tool-Cross-Site-Scripting.html
|
||||
CVE-2014-5173 - http://packetstormsecurity.com/files/127667/SAP-HANA-IU5-SDK-Authentication-Bypass.html
|
||||
CVE-2014-5174 - http://packetstormsecurity.com/files/127671/SAP-Netweaver-Business-Warehouse-Missing-Authorization.html
|
||||
CVE-2014-5174 - https://service.sap.com/sap/support/notes/1974016
|
||||
CVE-2014-5176 - http://packetstormsecurity.com/files/127669/SAP-FI-Manager-Self-Service-Hardcoded-Username.html
|
||||
CVE-2014-5177 - http://www.ubuntu.com/usn/USN-2366-1
|
||||
CVE-2014-5178 - http://packetstormsecurity.com/files/127622/Easy-File-Sharing-Persistent-Cross-Site-Scripting.html
|
||||
@@ -51421,6 +51425,7 @@ CVE-2017-17682 - https://github.com/ImageMagick/ImageMagick/issues/870
|
||||
CVE-2017-17683 - https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c44
|
||||
CVE-2017-17684 - https://github.com/k0keoyo/Driver-Loaded-PoC/tree/master/Panda-Antivirus/Panda_Security_Antivirus_0xb3702c04_
|
||||
CVE-2017-17688 - https://www.patreon.com/posts/cybersecurity-15-18814817
|
||||
CVE-2017-17689 - https://pastebin.com/gNCc8aYm
|
||||
CVE-2017-17692 - http://packetstormsecurity.com/files/145510/Samsung-Internet-Browser-SOP-Bypass.html
|
||||
CVE-2017-17692 - https://www.exploit-db.com/exploits/43376/
|
||||
CVE-2017-17704 - https://systemoverlord.com/2017/12/18/cve-2017-17704-broken-cryptography-in-istar-ultra-ip-acm-by-software-house.html
|
||||
@@ -51633,6 +51638,7 @@ CVE-2017-18032 - https://security.dxw.com/advisories/xss-download-manager/
|
||||
CVE-2017-18044 - https://github.com/rapid7/metasploit-framework/pull/9340
|
||||
CVE-2017-18044 - https://github.com/rapid7/metasploit-framework/pull/9389
|
||||
CVE-2017-18044 - https://www.securifera.com/advisories/sec-2017-0001/
|
||||
CVE-2017-18046 - https://pastebin.com/Yxd9S46A
|
||||
CVE-2017-18047 - https://www.exploit-db.com/exploits/42011/
|
||||
CVE-2017-18047 - https://www.exploit-db.com/exploits/43236/
|
||||
CVE-2017-18047 - https://www.exploit-db.com/exploits/43518/
|
||||
@@ -76968,6 +76974,7 @@ CVE-2020-17473 - https://www.trendmicro.com/vinfo/us/threat-encyclopedia/vulnera
|
||||
CVE-2020-17479 - https://blog.sonatype.com/cve-2020-17479
|
||||
CVE-2020-17479 - https://github.com/manvel-khnkoyan/jpv/issues/10
|
||||
CVE-2020-17487 - https://github.com/radareorg/radare2/issues/17431
|
||||
CVE-2020-17494 - https://pastebin.com/s7UYG3vX
|
||||
CVE-2020-17496 - https://blog.exploitee.rs/2020/exploiting-vbulletin-a-tale-of-patch-fail/
|
||||
CVE-2020-17496 - https://forum.vbulletin.com/forum/vbulletin-announcements/vbulletin-announcements_aa/4445227-vbulletin-5-6-0-5-6-1-5-6-2-security-patch
|
||||
CVE-2020-17498 - https://www.oracle.com/security-alerts/cpujan2021.html
|
||||
@@ -79157,6 +79164,7 @@ CVE-2020-27351 - https://bugs.launchpad.net/bugs/1899193
|
||||
CVE-2020-27352 - https://bugs.launchpad.net/snapd/+bug/1910456
|
||||
CVE-2020-27358 - https://www.ruse.tech/blog/38
|
||||
CVE-2020-27359 - https://www.ruse.tech/blog/38
|
||||
CVE-2020-27366 - https://pastebin.com/sr0JR1ys
|
||||
CVE-2020-27368 - https://github.com/swzhouu/CVE-2020-27368
|
||||
CVE-2020-2737 - https://www.oracle.com/security-alerts/cpuapr2020.html
|
||||
CVE-2020-27373 - https://nvermaa.medium.com/cve-on-radio-technology-d-4b65efa1ba5c
|
||||
@@ -100961,6 +100969,7 @@ CVE-2022-37150 - https://www.sourcecodester.com/php/15129/online-diagnostic-lab-
|
||||
CVE-2022-37151 - https://www.sourcecodester.com/php/15129/online-diagnostic-lab-management-system-php-free-source-code.html
|
||||
CVE-2022-37152 - https://www.sourcecodester.com/php/15129/online-diagnostic-lab-management-system-php-free-source-code.html
|
||||
CVE-2022-37155 - https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.2/SPIP_4.1.2_AUTH_RCE/SPIP_4.1.2_AUTH_RCE_Abyss_Watcher_12_07_22.md
|
||||
CVE-2022-37155 - https://pastebin.com/ZH7CPc8X
|
||||
CVE-2022-37155 - https://spawnzii.github.io/posts/2022/07/how-we-have-pwned-root-me-in-2022/
|
||||
CVE-2022-37159 - https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/rce/rce_file_upload.md
|
||||
CVE-2022-37160 - https://github.com/matthieu-hackwitharts/claroline-CVEs/blob/main/csrf/csrf.md
|
||||
@@ -102914,6 +102923,7 @@ CVE-2022-43342 - https://discussions.eramba.org/t/question-stored-xss-vulnerabil
|
||||
CVE-2022-4335 - https://gitlab.com/gitlab-org/gitlab/-/issues/353018
|
||||
CVE-2022-43357 - https://github.com/sass/libsass/issues/3177
|
||||
CVE-2022-43358 - https://github.com/sass/libsass/issues/3178
|
||||
CVE-2022-43363 - https://pastebin.com/72MRwNXW
|
||||
CVE-2022-43372 - https://github.com/emlog/emlog/issues/195
|
||||
CVE-2022-43380 - https://www.ibm.com/support/pages/node/6847947
|
||||
CVE-2022-4340 - https://wpscan.com/vulnerability/8a7bd9f6-2789-474b-a237-01c643fdfba7
|
||||
@@ -103275,6 +103285,8 @@ CVE-2022-44960 - https://github.com/anhdq201/webtareas/issues/4
|
||||
CVE-2022-44961 - https://github.com/anhdq201/webtareas/issues/7
|
||||
CVE-2022-44962 - https://github.com/anhdq201/webtareas/issues/12
|
||||
CVE-2022-4497 - https://wpscan.com/vulnerability/3fa6c8b3-6b81-4fe3-b997-25c9e5fdec86
|
||||
CVE-2022-45003 - https://pastebin.com/z5MD3z8c
|
||||
CVE-2022-45004 - https://pastebin.com/z5MD3z8c
|
||||
CVE-2022-4502 - https://huntr.dev/bounties/5bdef791-6886-4008-b9ba-045cb4524114
|
||||
CVE-2022-45025 - https://github.com/shd101wyy/vscode-markdown-preview-enhanced/issues/639
|
||||
CVE-2022-45026 - https://github.com/shd101wyy/vscode-markdown-preview-enhanced/issues/640
|
||||
@@ -112245,6 +112257,7 @@ CVE-2023-46685 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2
|
||||
CVE-2023-46694 - https://github.com/invisiblebyte/CVE-2023-46694
|
||||
CVE-2023-46701 - https://mattermost.com/security-updates
|
||||
CVE-2023-46722 - https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-jfxw-6c5v-c42f
|
||||
CVE-2023-46725 - https://pastebin.com/8K5Brwbq
|
||||
CVE-2023-46730 - https://github.com/Intermesh/groupoffice/security/advisories/GHSA-vw6c-h82w-mvfv
|
||||
CVE-2023-46736 - https://github.com/espocrm/espocrm/security/advisories/GHSA-g955-rwxx-jvf6
|
||||
CVE-2023-46744 - https://github.com/Squidex/squidex/security/advisories/GHSA-xfr4-qg2v-7v5m
|
||||
@@ -118242,6 +118255,7 @@ CVE-2024-28436 - https://www.dlink.com/en/security-bulletin/
|
||||
CVE-2024-28441 - https://github.com/iamHuFei/HVVault/blob/main/webapp/%E9%AD%94%E6%96%B9%E7%BD%91%E8%A1%A8/magicflu-mailupdate-jsp-fileupload.md
|
||||
CVE-2024-28442 - https://medium.com/%40deepsahu1/cve-2024-28442-yealink-ip-phone-webview-escape-leads-to-sensitive-file-disclosure-via-directory-686ef8f80227
|
||||
CVE-2024-28442 - https://medium.com/@deepsahu1/cve-2024-28442-yealink-ip-phone-webview-escape-leads-to-sensitive-file-disclosure-via-directory-686ef8f80227
|
||||
CVE-2024-28456 - https://pastebin.com/CYMDR4ss
|
||||
CVE-2024-28458 - https://github.com/keepinggg/poc/blob/main/poc_of_swfc
|
||||
CVE-2024-2849 - https://github.com/CveSecLook/cve/issues/1
|
||||
CVE-2024-2850 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC15/V15.03.05.18/saveParentControlInfo_urls.md
|
||||
@@ -120291,6 +120305,7 @@ CVE-2024-39025 - https://medium.com/@cnetsec/a-vulnerability-cve-2024-39025-has-
|
||||
CVE-2024-39027 - https://github.com/seacms-net/CMS/issues/17
|
||||
CVE-2024-3903 - https://wpscan.com/vulnerability/0a0e7bd4-948d-47c9-9219-380bda9f3034/
|
||||
CVE-2024-39031 - https://github.com/toneemarqus/CVE-2024-39031
|
||||
CVE-2024-39033 - https://pastebin.com/SHExsfh6
|
||||
CVE-2024-39036 - https://github.com/seacms-net/CMS/issues/18
|
||||
CVE-2024-39037 - https://miguelsantareno.github.io/airc_exploit.txt
|
||||
CVE-2024-3905 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC500/R7WebsSecurityHandler.md
|
||||
@@ -120482,6 +120497,7 @@ CVE-2024-40336 - https://github.com/Tank992/cms/blob/main/73/readme.md
|
||||
CVE-2024-40392 - https://github.com/CveSecLook/cve/issues/46
|
||||
CVE-2024-40393 - https://github.com/CveSecLook/cve/issues/47
|
||||
CVE-2024-40394 - https://github.com/CveSecLook/cve/issues/48
|
||||
CVE-2024-40395 - https://pastebin.com/9dc4LYGA
|
||||
CVE-2024-4040 - https://www.bleepingcomputer.com/news/security/crushftp-warns-users-to-patch-exploited-zero-day-immediately/
|
||||
CVE-2024-4040 - https://www.rapid7.com/blog/post/2024/04/23/etr-unauthenticated-crushftp-zero-day-enables-complete-server-compromise/
|
||||
CVE-2024-40400 - https://github.com/marcantondahmen/automad/issues/106
|
||||
@@ -123158,6 +123174,7 @@ CVE-2024-56171 - https://gitlab.gnome.org/GNOME/libxml2/-/issues/828
|
||||
CVE-2024-56173 - https://support.optimizely.com/hc/en-us/articles/32344323720973-Configured-Commerce-Security-Advisory-COM-2024-01
|
||||
CVE-2024-56174 - https://support.optimizely.com/hc/en-us/articles/32344323720973-Configured-Commerce-Security-Advisory-COM-2024-01
|
||||
CVE-2024-56175 - https://support.optimizely.com/hc/en-us/articles/32344323720973-Configured-Commerce-Security-Advisory-COM-2024-01
|
||||
CVE-2024-56179 - https://pastebin.com/Ax078JVF
|
||||
CVE-2024-56198 - https://github.com/cabraviva/path-sanitizer/security/advisories/GHSA-94p5-r7cc-3rpr
|
||||
CVE-2024-56199 - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-ww33-jppq-qfrp
|
||||
CVE-2024-5626 - https://wpscan.com/vulnerability/6b03f450-4982-4f6c-a6f1-f7e85b1deec1/
|
||||
@@ -127637,6 +127654,7 @@ CVE-2025-15442 - https://github.com/En0t5/vul/blob/main/crmeb/crmeb-export-produ
|
||||
CVE-2025-15442 - https://github.com/En0t5/vul/blob/main/crmeb/crmeb-export-product_list-SQL.md#poc
|
||||
CVE-2025-15443 - https://github.com/En0t5/vul/blob/main/crmeb/crmeb-product-productExport-SQL.md
|
||||
CVE-2025-15443 - https://github.com/En0t5/vul/blob/main/crmeb/crmeb-product-productExport-SQL.md#poc
|
||||
CVE-2025-15445 - https://wpscan.com/vulnerability/f3f4a734-5828-4e3f-a170-28189aeda929/
|
||||
CVE-2025-15446 - https://github.com/xiaozipang/CVE/issues/2
|
||||
CVE-2025-15447 - https://github.com/xinshou-test/CVE/issues/1
|
||||
CVE-2025-15450 - https://github.com/sfturing/hosp_order/issues/111
|
||||
@@ -128377,6 +128395,7 @@ CVE-2025-23001 - https://codetoanbug.com/poc-cve-2025-23001-ctfd-english/
|
||||
CVE-2025-23016 - https://github.com/FastCGI-Archives/fcgi2/issues/67
|
||||
CVE-2025-23022 - https://gitlab.freedesktop.org/freetype/freetype/-/issues/1312
|
||||
CVE-2025-23024 - https://github.com/glpi-project/glpi/releases/tag/10.0.18
|
||||
CVE-2025-23025 - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rmm7-r7wr-xpfg
|
||||
CVE-2025-23026 - https://github.com/casid/jte/security/advisories/GHSA-vh22-6c6h-rm8q
|
||||
CVE-2025-23030 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-88c9-gpgh-6vvr
|
||||
CVE-2025-23031 - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-wp4f-qhh2-8vfv
|
||||
@@ -129687,6 +129706,7 @@ CVE-2025-30066 - https://www.wiz.io/blog/github-action-tj-actions-changed-files-
|
||||
CVE-2025-30072 - http://seclists.org/fulldisclosure/2025/May/20
|
||||
CVE-2025-30072 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-006.txt
|
||||
CVE-2025-30073 - https://www.syss.de/pentest-blog/businesslogik-fehler-bei-aufwertung-von-geldkarten-in-opcr-webapp-aufwertung-syss-2024-089
|
||||
CVE-2025-30075 - https://pastebin.com/5CaNfyGH
|
||||
CVE-2025-30076 - https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39170
|
||||
CVE-2025-30076 - https://github.com/gl0wyy/koha-task-scheduler-rce
|
||||
CVE-2025-30086 - https://www.elttam.com/blog/plormbing-your-django-orm/
|
||||
@@ -133005,44 +133025,74 @@ CVE-2025-5603 - https://github.com/YZS17/CVE/blob/main/Hospital_Management_Syste
|
||||
CVE-2025-5604 - https://github.com/YZS17/CVE/blob/main/Hospital_Management_System/user-login.md
|
||||
CVE-2025-56077 - https://1drv.ms/t/c/12406a392c92914b/EURTWAoIJNRMtvzNPi08CToB780nsKPNHZ2Fdmcf9xsoRA?e=jHygdj
|
||||
CVE-2025-56077 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56077.md
|
||||
CVE-2025-56079 - https://1drv.ms/t/c/12406a392c92914b/EZdYNxRd8ilMrCRXLnltUKEBiBXJzrTc9i7Y643cuho9PA?e=7Bifxw
|
||||
CVE-2025-56079 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56079.md
|
||||
CVE-2025-56082 - https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
CVE-2025-56082 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56082.md
|
||||
CVE-2025-56083 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56083.md
|
||||
CVE-2025-56084 - https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi
|
||||
CVE-2025-56084 - https://1drv.ms/t/c/12406a392c92914b/EdfdfnvOxAhJqdeIGlRRo6ABHJz03PPPBYIMdLoD6iNhlg?e=qNhi6o
|
||||
CVE-2025-56084 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56084.md
|
||||
CVE-2025-56085 - https://1drv.ms/f/c/12406a392c92914b/EuESCSUsYvtAtfW1SfmGGxsBw-kN9iCbpnUU9T8TXofH3w?e=kp5OXK
|
||||
CVE-2025-56085 - https://1drv.ms/t/c/12406a392c92914b/ERuoK3MLW2RLpQ6qOoGs5wIB73tNnsDzRT8U6U6z4VmskQ?e=KIjaOa
|
||||
CVE-2025-56086 - https://1drv.ms/f/c/12406a392c92914b/EuESCSUsYvtAtfW1SfmGGxsBw-kN9iCbpnUU9T8TXofH3w?e=kp5OXK
|
||||
CVE-2025-56086 - https://1drv.ms/t/c/12406a392c92914b/ETgTxS2wFBlCjG4DP56-PjkBWwvraLHZ-BVaWh9Vs9_SuA?e=aTbjEe
|
||||
CVE-2025-56086 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56086.md
|
||||
CVE-2025-56087 - https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
CVE-2025-56087 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56087.md
|
||||
CVE-2025-56088 - https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
CVE-2025-56088 - https://1drv.ms/t/c/12406a392c92914b/EQ5pK82-KmxKht6YgsEzaOsBzrC05Cael1vwpfM9ZxX97Q?e=qEgmtB
|
||||
CVE-2025-56088 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56088.md
|
||||
CVE-2025-56089 - https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM
|
||||
CVE-2025-56089 - https://1drv.ms/t/c/12406a392c92914b/Ea56irtVj4dNs59Pzz7fkiIBQeVLjDcMDEXC2FpCQydIZQ?e=70gcOe
|
||||
CVE-2025-56089 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56089.md
|
||||
CVE-2025-56090 - https://1drv.ms/t/c/12406a392c92914b/EfSHWqE3N11FpgQsV1BlZk0BxXIhFQjIp_xmJYIq1APvrw?e=JCIm6k
|
||||
CVE-2025-56090 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56090.md
|
||||
CVE-2025-56091 - https://1drv.ms/f/c/12406a392c92914b/EgUg1zJuaItDmLxZhkCg4B8BcJTRYnXyX4ePIIjNoZrRew?e=a23cK6
|
||||
CVE-2025-56091 - https://1drv.ms/t/c/12406a392c92914b/EdiWfxSbC0pAu_oksKjm2xgBXSCavYBBJt8V51JkcH4Dsw?e=OhOVCN
|
||||
CVE-2025-56091 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56091.md
|
||||
CVE-2025-56092 - https://1drv.ms/t/c/12406a392c92914b/EaD98URfTfFKm1v_MTfU-UEBUxRf5vj3O0x7fhabn5_l9A?e=BuNPV9
|
||||
CVE-2025-56092 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56091.md
|
||||
CVE-2025-56093 - https://1drv.ms/t/c/12406a392c92914b/Edoz9sBTjeJMqw8K0f3lWgMBNxBlpE9IIUwOX2h2S1cMhw?e=46VlOq
|
||||
CVE-2025-56093 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56092.md
|
||||
CVE-2025-56093 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56093.md
|
||||
CVE-2025-56094 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56094.md
|
||||
CVE-2025-56095 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56095.md
|
||||
CVE-2025-56096 - https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
CVE-2025-56096 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56096.md
|
||||
CVE-2025-56097 - https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi
|
||||
CVE-2025-56097 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56097.md
|
||||
CVE-2025-56098 - https://1drv.ms/t/c/12406a392c92914b/EYC9-EvSxKZOum9kuAtPDq4BjKb0c8IV6B52lDEAD33pEA?e=2C0BKO
|
||||
CVE-2025-56098 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56098.md
|
||||
CVE-2025-56099 - https://1drv.ms/f/c/12406a392c92914b/EjgEtJ5yojhDpEoT-PbidhsBzsbVnT-D-32qK1bCrQN3-g?e=cVRYgN
|
||||
CVE-2025-56099 - https://1drv.ms/t/c/12406a392c92914b/ETaD7apCrPFLtMj473NHV2gBaYrKV9A4ZZKMfyWgC949Zw?e=iyjx5g
|
||||
CVE-2025-56099 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56099.md
|
||||
CVE-2025-5610 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_submitpropertydelete.php.md
|
||||
CVE-2025-56101 - https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM
|
||||
CVE-2025-56101 - https://1drv.ms/t/c/12406a392c92914b/EbNlU_0K0v1Krzq7CaUWn0AB_yu3ICrdmwoVuS2txFGMhA?e=0gIUMh
|
||||
CVE-2025-56101 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56101.md
|
||||
CVE-2025-56102 - https://1drv.ms/f/c/12406a392c92914b/EgUg1zJuaItDmLxZhkCg4B8BcJTRYnXyX4ePIIjNoZrRew?e=a23cK6
|
||||
CVE-2025-56102 - https://1drv.ms/t/c/12406a392c92914b/EXNcf0lLKjZLv6U4-ErArMkBKqwLJhJbiJwuQl5MSd0W3w?e=GfXnnz
|
||||
CVE-2025-56102 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56102.md
|
||||
CVE-2025-56106 - https://1drv.ms/f/c/12406a392c92914b/EgUg1zJuaItDmLxZhkCg4B8BcJTRYnXyX4ePIIjNoZrRew?e=a23cK6
|
||||
CVE-2025-56106 - https://1drv.ms/t/c/12406a392c92914b/EcUP8SMciOVBgNEy31-OnnkBQRk_fUCDWUtdDX8UBfbXEA?e=FuQDPi
|
||||
CVE-2025-56106 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56106.md
|
||||
CVE-2025-56107 - https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
CVE-2025-56107 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56107.md
|
||||
CVE-2025-56108 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56108.md
|
||||
CVE-2025-56109 - https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
CVE-2025-56109 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56109.md
|
||||
CVE-2025-5611 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_submitpropertyupdate.php.md
|
||||
CVE-2025-56110 - https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
CVE-2025-56110 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56110.md
|
||||
CVE-2025-56111 - https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
CVE-2025-56111 - https://1drv.ms/t/c/12406a392c92914b/ERJa0DnnR29MqtbLLRQirGYB4qA9dAdpn6eIJH9LwNlBmw?e=y6KkGo
|
||||
CVE-2025-56111 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56111.md
|
||||
CVE-2025-56113 - https://1drv.ms/t/c/12406a392c92914b/EY_XOykAOvJJkGsDkmahTboBmmvNWczbXF3brroYsTWmTA?e=2Itzta
|
||||
CVE-2025-56113 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56113.md
|
||||
CVE-2025-56114 - https://1drv.ms/f/c/12406a392c92914b/EmXarTTNPwFHjk8lLwQIqj8Ba9nlq-owLMBtEKpBwMrn5A?e=vvi2dM
|
||||
CVE-2025-56114 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56114.md
|
||||
CVE-2025-56117 - https://1drv.ms/t/c/12406a392c92914b/Ed2lBCN9vhdPnEs7WKvpfEQBp7czazgO9PYxS2TFSHx7TQ?e=HZZaGq
|
||||
CVE-2025-56117 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56117.md
|
||||
CVE-2025-56118 - https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh
|
||||
CVE-2025-56118 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56118.md
|
||||
@@ -133050,11 +133100,16 @@ CVE-2025-5612 - https://github.com/YZS17/CVE/blob/main/Online_Fire_Reporting_Sys
|
||||
CVE-2025-56120 - https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh
|
||||
CVE-2025-56120 - https://1drv.ms/t/c/12406a392c92914b/EZf6v9BXDpFAs09oCidKJ8oBXclUWtjyMcQv3DgMfISkJg?e=MyjOdI
|
||||
CVE-2025-56120 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56120.md
|
||||
CVE-2025-56122 - https://1drv.ms/f/c/12406a392c92914b/Eohr-0awt6VAuiLCNhCG0rgBLQip6nJpl-9Hy0OqB4MvFg?e=DIfBxi
|
||||
CVE-2025-56122 - https://1drv.ms/t/c/12406a392c92914b/EZOBtzLwlmBKschv6sxT_LcBBKnMP_OXO7d24321UD8x8g?e=Dpui5j
|
||||
CVE-2025-56122 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56122.md
|
||||
CVE-2025-56123 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56123.md
|
||||
CVE-2025-56124 - https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh
|
||||
CVE-2025-56124 - https://1drv.ms/t/c/12406a392c92914b/EWnUygFXeTVNigjp81gJ3LQBJ-hCSb_Yq4gGIMxlan7uJg?e=emOIoc
|
||||
CVE-2025-56124 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56124.md
|
||||
CVE-2025-56127 - https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb
|
||||
CVE-2025-56127 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56127.md
|
||||
CVE-2025-56129 - https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10
|
||||
CVE-2025-56129 - https://1drv.ms/t/c/12406a392c92914b/EaJ2e_mzgltOiHqb4t8xIvgBoT2CYEP0nrhZd7IYlCHSPQ?e=miUrrL
|
||||
CVE-2025-56129 - https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56129.md
|
||||
CVE-2025-5613 - https://github.com/YZS17/CVE/blob/main/Online_Fire_Reporting_System/sqli_request-details.php_requestid.md
|
||||
@@ -135133,6 +135188,7 @@ CVE-2025-71031 - https://suphawith-phusanbai.gitbook.io/book-of-suphawith/my-exp
|
||||
CVE-2025-7107 - https://github.com/vri-report/reports/issues/2
|
||||
CVE-2025-7107 - https://github.com/vri-report/reports/issues/2#issue-3161840085
|
||||
CVE-2025-7108 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250621-01.md
|
||||
CVE-2025-7108 - https://vuldb.com/?ctiid.315019
|
||||
CVE-2025-7109 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README11.md
|
||||
CVE-2025-7109 - https://vuldb.com/?submit.604790
|
||||
CVE-2025-7110 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README12.md
|
||||
@@ -137030,11 +137086,15 @@ CVE-2026-20868 - https://www.vicarius.io/vsociety/posts/cve-2026-20868-detection
|
||||
CVE-2026-20868 - https://www.vicarius.io/vsociety/posts/cve-2026-20868-mitigation-script-heap-based-buffer-overflow-vulnerability-affecting-windows-rras
|
||||
CVE-2026-2087 - https://vuldb.com/?id.344654
|
||||
CVE-2026-2087 - https://www.sourcecodester.com/
|
||||
CVE-2026-20872 - https://www.vicarius.io/vsociety/posts/cve-2026-20872-detection-script-spoofing-vulnerability-in-windows-ntlm
|
||||
CVE-2026-20872 - https://www.vicarius.io/vsociety/posts/cve-2026-20872-mitigation-script-spoofing-vulnerability-in-windows-ntlm
|
||||
CVE-2026-2089 - https://www.sourcecodester.com/
|
||||
CVE-2026-2090 - https://www.sourcecodester.com/
|
||||
CVE-2026-2106 - https://github.com/yeqifu/warehouse/issues/58
|
||||
CVE-2026-2106 - https://github.com/yeqifu/warehouse/issues/58#issue-3846664260
|
||||
CVE-2026-2116 - https://github.com/zpf7029/oblong/issues/1
|
||||
CVE-2026-21253 - https://www.vicarius.io/vsociety/posts/cve-2026-21253-detection-script-elevation-of-privilege-vulnerability-in-mailslot-file-system
|
||||
CVE-2026-21253 - https://www.vicarius.io/vsociety/posts/cve-2026-21253-mitigation-script-elevation-of-privilege-vulnerability-in-mailslot-file-system
|
||||
CVE-2026-2138 - https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/SetStaticRouteCfg.md
|
||||
CVE-2026-2138 - https://github.com/MRAdera/IoT-Vuls/blob/main/tenda/tx9%20pro/SetStaticRouteCfg.md#poc
|
||||
CVE-2026-21428 - https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-wpc6-j37r-jcx7
|
||||
@@ -137050,6 +137110,9 @@ CVE-2026-2150 - https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.c
|
||||
CVE-2026-21501 - https://github.com/InternationalColorConsortium/iccDEV/issues/365
|
||||
CVE-2026-21509 - https://www.vicarius.io/vsociety/posts/cve-2026-21509-detection-script-microsoft-office-security-feature-bypass-vulnerability
|
||||
CVE-2026-21509 - https://www.vicarius.io/vsociety/posts/cve-2026-21509-mitigation-script-microsoft-office-security-feature-bypass-vulnerability
|
||||
CVE-2026-21513 - https://www.vicarius.io/vsociety/posts/cve-2026-21513-detection-script-security-feature-bypass-vulnerability-in-mshtml-framework
|
||||
CVE-2026-21513 - https://www.vicarius.io/vsociety/posts/cve-2026-21513-mitigation-script-security-feature-bypass-vulnerability-in-mshtml-framework
|
||||
CVE-2026-21533 - https://www.vicarius.io/vsociety/posts/cve-2026-21533-detection-script-privilege-escalation-vulnerability-in-windows-remote-desktop
|
||||
CVE-2026-2155 - https://github.com/master-abc/cve/issues/32
|
||||
CVE-2026-2156 - https://github.com/baguette168/CVE/issues/1
|
||||
CVE-2026-2157 - https://github.com/master-abc/cve/issues/28
|
||||
@@ -137069,6 +137132,7 @@ CVE-2026-21732 - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
|
||||
CVE-2026-21736 - https://www.imaginationtech.com/gpu-driver-vulnerabilities/
|
||||
CVE-2026-2177 - https://www.sourcecodester.com/
|
||||
CVE-2026-2179 - https://vuldb.com/?id.344882
|
||||
CVE-2026-2180 - https://vuldb.com/?ctiid.344883
|
||||
CVE-2026-2181 - https://vuldb.com/?id.344884
|
||||
CVE-2026-2182 - https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md
|
||||
CVE-2026-2182 - https://github.com/cha0yang1/UTT521G/blob/main/RCE1.md#poc
|
||||
@@ -137125,6 +137189,8 @@ CVE-2026-22646 - https://www.first.org/cvss/calculator/3.1
|
||||
CVE-2026-22687 - https://github.com/Tencent/WeKnora/security/advisories/GHSA-pcwc-3fw3-8cqv
|
||||
CVE-2026-22693 - http://www.openwall.com/lists/oss-security/2026/01/11/1
|
||||
CVE-2026-22699 - https://github.com/RustCrypto/elliptic-curves/security/advisories/GHSA-78p6-6878-8mj6
|
||||
CVE-2026-2271 - https://bugzilla.redhat.com/show_bug.cgi?id=2438429
|
||||
CVE-2026-2272 - https://bugzilla.redhat.com/show_bug.cgi?id=2438428
|
||||
CVE-2026-22782 - https://github.com/rustfs/rustfs/security/advisories/GHSA-333v-68xh-8mmq
|
||||
CVE-2026-22787 - https://aydinnyunus.github.io/2026/01/17/cve-2026-22787-html2pdf-xss-vulnerability/
|
||||
CVE-2026-22789 - https://github.com/SMEWebify/WebErpMesv2/security/advisories/GHSA-64rv-f829-x6m4
|
||||
@@ -137221,6 +137287,8 @@ CVE-2026-24138 - https://github.com/FOGProject/fogproject/security/advisories/GH
|
||||
CVE-2026-24140 - https://github.com/franklioxygen/MyTube/security/advisories/GHSA-c938-x24g-fxcx
|
||||
CVE-2026-2418 - https://wpscan.com/vulnerability/b25c6cbc-39e7-4fa0-af0b-ee7759d2c497/
|
||||
CVE-2026-24291 - https://www.mdsec.co.uk/2026/03/rip-regpwn/
|
||||
CVE-2026-24294 - https://www.vicarius.io/vsociety/posts/cve-2026-24294-detection-script-improper-authentication-vulnerability-in-windows-smb-server
|
||||
CVE-2026-24294 - https://www.vicarius.io/vsociety/posts/cve-2026-24294-mitigation-script-improper-authentication-vulnerability-in-windows-smb-server
|
||||
CVE-2026-24409 - https://github.com/InternationalColorConsortium/iccDEV/issues/484
|
||||
CVE-2026-2441 - https://github.com/huseyinstif/CVE-2026-2441-PoC/blob/main/poc.html
|
||||
CVE-2026-24418 - https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4xwv-49c8-fvhq
|
||||
@@ -137622,6 +137690,9 @@ CVE-2026-3383 - https://github.com/ChaiScript/ChaiScript/issues/634
|
||||
CVE-2026-3383 - https://github.com/ChaiScript/ChaiScript/issues/634#issue-3828234470
|
||||
CVE-2026-3384 - https://github.com/ChaiScript/ChaiScript/issues/633
|
||||
CVE-2026-3384 - https://github.com/ChaiScript/ChaiScript/issues/633#issue-3828176056
|
||||
CVE-2026-33870 - https://w4ke.info/2025/06/18/funky-chunks.html
|
||||
CVE-2026-33896 - https://github.com/digitalbazaar/forge/commit/2e492832fb25227e6b647cbe1ac981c123171e90
|
||||
CVE-2026-33896 - https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25
|
||||
CVE-2026-3395 - https://vuldb.com/?id.348281
|
||||
CVE-2026-3410 - https://github.com/DeelBran-7/hyf/issues/1
|
||||
CVE-2026-3449 - https://security.snyk.io/vuln/SNYK-JS-TOOTALLNATEONCE-15250612
|
||||
@@ -137700,3 +137771,4 @@ CVE-2026-4845 - https://thinhneee.github.io/posts/muucmf-xss/
|
||||
CVE-2026-4846 - https://thinhneee.github.io/posts/muucmf-xss-channel/
|
||||
CVE-2026-4847 - https://thinhneee.github.io/posts/muucmf-xss-config/
|
||||
CVE-2026-4848 - https://thinhneee.github.io/posts/muucmf-xss-extend/
|
||||
CVE-2026-4968 - https://gist.github.com/Mohdanass/50a525ba0a72e10fda85f0db11eeed92
|
||||
Reference in new issue
Block a user