EUVD-2026-92415

A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authzfilter.go of the component API Endpoint. Performing a manipulation results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly Middleware API Remote Code Execution Authenticated RCE via OS Command Injection in Hoverfly ≤ 1.11.3 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-54123 CVSS Score| 9.8 — Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-78 OS...

pywintrace

ETW Event Tracing for Windows ETW è una funzionalità di tracciamento che consente a un utente di registrare eventi in un file o in un buffer. Una panoramica di ETW è disponibile qui. L'architettura di base include un Provider, un Controller e un Consumer. Il controller definisce e controlla una...

CVE-2026-8181-Lab

CVE-2026-8181 — Laboratorio di Bypass dell'Autenticazione di Burst Statistics Laboratorio Docker locale per CVE-2026-8181 , un bypass dell'autenticazione nel plugin WordPress Burst Statistics – Privacy-Friendly WordPress Analytics. Questo laboratorio confronta una versione vulnerabile del plugin...

CVE-2022-36804

CVE-2022-36804 - Vulnerabilità di iniezione di comandi in Atlassian Bitbucket Server and Data Center ⚠️ Solo per scopi educativi e di ricerca sulla sicurezza autorizzati Autori dell'Exploit Originale Molto grato all'autore originale della PoC Walnut Security Services Pvt. Ltd Descrizione Molteplic...

CheckPoint-CVE-Webscanner

CP VPN CVE Scanner An approval-based local webapp for scanning configuration markers associated with Check Point CVE-2026-50751, CVE-2026-50752, CVE-2026-85102, and CVE-2026-85103 and applying selected mitigations through Check Point Management API commands. This tool is not created or supported ...

poc-2025-9074

CVE-2025-9074 | Docker API CVE-2025-9074 PoC Prova di concetto Un sofisticato framework di exploitation per CVE-2025-9074, che prende di mira endpoint Docker API non autenticati, dotato di una shell interattiva integrata per l'esecuzione dei comandi. Panoramica Questo strumento automatizza lo...

CVE-2026-13736

CVE-2026-13736: NewPath WildApricotPress Add-on – Member Directory = 1.0.0 — Nicht authentifizierte Offenlegung von Mitglieder-PII über die REST-API 📖 Überblick über das Advisory CVE-2026-13736 ist eine Schwachstelle zur nicht authentifizierten Offenlegung von personenbezogenen Daten PII von...

CVE-2026-44338-Lab

CVE-2026-44338 Lab di Bypass dell'Autenticazione in PraisonAI Lab Docker locale per CVE-2026-44338, un bypass dell'autenticazione nel server API Flask legacy di PraisonAI. Questo lab dimostra la condizione di accesso non autenticato sulle route API legacy. Usa intenzionalmente una riproduzione...

CVE-2020-0618_DETECTION

CVE-2020-0618 - PoC di rilevamento RCE per Microsoft SQL Server Reporting Services SSRS 📜 Descrizione Questo è un semplice PoC per rilevare CVE-2020-0618 , una vulnerabilità di Remote Code Execution che colpisce Microsoft SQL Server Reporting Services SSRS. La vulnerabilità esiste a causa di una...

EUVD-2026-92313

Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10...

CVE-2026-103335 WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10...

CVE-2026-103335

The Video Conferencing with Zoom plugin for WordPress (by Deepen Bajracharya) is vulnerable to a Sensitive Data Exposure issue in versions up to and including 4.6.10 . The vulnerability, classified as CWE-201 , allows for the retrieval of embedded sensitive data from the video-conferencing-with-z...

POC-CVE-2025-31931

Analisi Leggi qui: https://tinyhack.com/2025/11/09/cve-2025-31931-arbitrary-shared-library-loading-in-intel-itt-api-on-android-affects-opencv-4-10/...

CVE-2026-105314

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...

CVE-2026-27886-check

CVE-2026-27886 Vulnerability Assessment Tool Safely detect whether a Strapi instance is vulnerable to CVE-2026-27886 without performing the full account-takeover chain. See the full write-up on the Bishop Fox blog. Description CVE-2026-27886 is an unauthenticated parameter sanitization bypass in...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Arbitrary File Write via Symlink Traversal Overview Gogs = 0.13.3 is vulnerable to arbitrary file write through the PutContents API /api/v1/repos/:owner/:repo/contents/:path. The API validates file paths for directory-traversal sequences ../ but does not resolve...

dockerevil

dockerevil Ein einfaches Repository, um meine Sicherheitslücken in der Docker-Technologie zu speichern 2016 - 2017 Docker-API-PrivilegieneskalationLPE/RPE Eskalation über Offline-Server/Minimal-Images/Build aus TAR-Dockerfile Docker-SUDO-Privilegieneskalation PoC Nmap-Skripte 2019...

CVE-2026-105314

Papermerge 3.5.3 is vulnerable to remote code execution (RCE) due to a directory traversal flaw in the /api/documents/upload endpoint. A standard user can exploit this to write a Python .pth file into the site-packages directory. The malicious code within the .pth file is executed automatically d...

EUVD-2026-92275

Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and its code is executed upon the next start of the Python interpreter...