266517 matches found
CVE-2021-25076
CVE-2021-25076-Exploit 워드프레스 플러그인 WP User Frontend 3.5.26 - SQL 인젝션 인증됨 CVE 설명: WP User Frontend 워드프레스 플러그인 3.5.26 이전 버전은 Subscribers 대시보드에서 SQL 문에 사용하기 전에 status 매개변수를 검증하고 이스케이프하지 않아 SQL 인젝션이 발생합니다. 위생 처리 및 이스케이프 부족으로 인해 이는 반사형 교차 사이트 스크립팅Reflected Cross-Site Scripting으로 이어질 수도 있습니다...
CVE-2026-75465
An Incorrect Access Control vulnerability exists in the /api.php/user/get_list endpoint of Maccms v10 (version v2026.1000.4055 ). The endpoint performs no authentication or authorization checks, allowing an unauthenticated remote attacker to send a crafted HTTP GET request with limit and offset p...
aws-key-disabler
AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...
CVE-2026-28672
CVE-2026-28672 — Apache Ranger UnixUserGroupBuilder の OS コマンドインジェクション Apache Ranger の user-sync（unixusersync）モジュールにおける OS コマンドインジェクションの実行可能な PoC 再現コードです。 同期された各ユーザーのグループを列挙する際、UnixUserGroupBuilder はシェルを介して id コマンドを実行し、ユーザー名 をコマンドラインに連結します： root@kitploit: //...
byp4xx
root@kitploit: / / / // / / / / / / / // /| |// |// / // / // / // / / Некоторые опции cURL, которые можно использовать, например: -L следовать перенаправлениям ответы 30X -x : для установки прокси -m для установки тайм-аута -H для новых заголовков. Экранируйте двойные кавычки. -d для данных в...
osueta
root@kitploit: / \ / / | || | | | ' / - ' \ \ \ | /| ./||||//||| || | | | | | | | | | || -/ - '| | || ' \ || | ' / - '/ | | / \ ' \ ///|| ||||,||||| ,||/||| | /| || | | | | | | | ' | | ' / | / \ | / / | / / || ||||||||, | // \|\,|\ |/ What's OSUETA? root@kitploit:...
CVE-2026-24061-POC
CVE-2026-24061 - telnetd 인증 우회 PoC telnetd의 치명적인 인증 우회 취약점으로 인해 root 권한으로 RCE가 가능합니다 2015년부터 취약점이 포함된 telnetd 버전을 사용하는 시스템에 영향을 미칩니다 소개 이 PoC는 11년 동안 탐지되지 않았던 telnetd의 치명적인 인증 우회 취약점인 CVE-2026-24061 을 시연합니다. 이 취약점은 telnetd 로그인 프로세스에서 USER 환경 변수를 부적절하게 처리하는 데서 비롯됩니다. 취약점을 유발한 악명 높은 커밋은 여기에서 확인할 수...
Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS
CVE-2021-46073 익스플로잇 제목: Vehicle Service Management System - '사용자 목록' 저장형 크로스 사이트 스크립팅 XSS 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 중간 참고: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46073...
rakkess
rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...
CVE-2026-59649
A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...
CVE-2020-25627
CVE-2020-25627 사용자 프로필의 moodlenetprofile 매개변수를 통한 저장형 XSS 이 CVE에 대한 나의 PoC 사용자 요구 사항: 학생 또는 등록이 가능한 사이트 moodlenetprofile의 XSS root@kitploit: Step 1: Log in with an authenticated user Can register or through creating a new user without assigning roles Step 2: Quick access to Edit profile...
CVE-2026-77634
CakePHP is a rapid development framework for PHP. Prior to versions 4.5.12, 4.6.5, 5.1.8, 5.2.14, and 5.3.7 on their respective release lines, custom mail headers added with Message::setHeaders or Message::addHeaders do not have CRLF bytes removed, allowing header injection when user-controlled...
gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow
A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...
gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing
A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...
gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing
A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...
gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow
A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...
CVE-2026-77634
CakePHP , a PHP rapid development framework, is affected by a CRLF header injection vulnerability in its mail transport layer. Custom mail headers added via Message::setHeaders() or Message::addHeaders() do not strip CRLF bytes, allowing an attacker to inject arbitrary headers when user-controlle...
msmailprobe
msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...
CVE-2026-77635 CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver
CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBuilder::jsonValue with PostgresDriver is vulnerable to SQL injection when user-controlled data is supplied to the jsonPath parameter. This issue is fixed in...
