CVE-2026-81826

Flowintel (versions >=3.3.0 ) fails to revoke existing authenticated sessions when a user's password is changed. An attacker who already holds a valid session token retains access until that session expires naturally, even after the victim changes their password. The fix detects password chang...

EUVD-2026-67125

Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within the...

CVE-2026-31431

CVE-2026-31431 Binario standard CopyFail Ricevi tutti i nuovi avvisi CVE su https://exploitroom.com root@kitploit: mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Lin...

EUVD-2026-66483

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

CVE-2026-1459-POC

CVE-2026-1459-POC POC per la CVE-2026-1459 il cui payload modifica la password SSH di root. Richiede credenziali di amministrazione valide, modifica temporaneamente la password di root; il riavvio reimposta la password di root. Funziona su VMG3625-T50B e modelli simili, è garantito il funzionamen...

CVE-2025-2304-POC

CVE-2025-2304-POC CVE-2025-2304 के लिए मैन्युअल PoC: Camaleon CMS संस्करण 2.9.0 शोषण के चरण 1. एक निम्न-विशेषाधिकार वाले उपयोगकर्ता जैसे, "Bob" के रूप में लॉग इन करें। 2. प्रॉक्सी जैसे Burpsuite, caido और अन्य का उपयोग करके पासवर्ड परिवर्तन को इंटरसेप्ट करें। 3. पासवर्ड परिवर्तन के दौरान...

cvelistV5

Nota 2026-2-17 Aggiunta di un giorno aggiuntivo di elaborazione per la normalizzazione delle date per risolvere potenziali incongruenze Nuova pianificazione della normalizzazione delle date: 16/02/26 - 28/02/26 Nota 2026-2-10 Modifica del filedeltaLog.json per la normalizzazione delle date dei...

fcn-

fcn conecte sua rede privada gratuitamente de qualquer lugar 1. O que é o fcn fcnfree connect é uma ferramenta simplificada para conectar redes privadas com um clique, composta por servidor e cliente O fcn usa o servidor de dados público do fcn e tecnologias de criptografia de dados para conectar...

CVE-2026-41940

CVE-2026-41940 – cPanel/WHM Auth Bypass + Root-Passwort-Änderer Dieses Skript nutzt eine Authentication-Bypass-Schwachstelle in cPanel/WHM CVE-2026-41940 mithilfe von CRLF-Injection aus, um eine Administrator-Sitzung zu fälschen. Nach erfolgreichem Angriff kann das Skript das Root-Passwort des...

CVE-2023-28810

CVE-2023-28810 Эксплойт для CVE-2023-28810. udp-config-changer.py Изменяет текущую конфигурацию целевого домофона Hikvision без необходимости аутентификации. udp-password-brute.py Пытается восстановить пароль администратора устройства методом подбора список слов не предоставляется...

CVE-2020-1472

CVE-2020-1472 POC Benötigt das neueste impacket von GitHub mit hinzugefügten netlogon-Strukturen. Beachten Sie, dass dies standardmäßig das Passwort des Domänencontroller-Kontos ändert. Ja, das ermöglicht Ihnen DCSync, aber es unterbricht auch die Kommunikation mit anderen Domänencontrollern, als...

fingerprint

fingerprint Monitoraggio delle modifiche al Registro e ai File in Windows - analisi forense per registro e file di Windows "fingerprint" registra lo stato di un sistema Windows in termini di file e registro. Tali impronte possono essere confrontate per trovare tutti i dati modificati. I dati...

PrivacyNet

PrivacyNet: Rete Privacy PrivacyNet è uno strumento di anonimizzazione che configura iptables e Tor per instradare tutti i servizi, il traffico e il DNS attraverso la rete Tor. Questo strumento consente agli utenti di instradare il traffico internet attraverso Tor e nascondere il proprio indirizz...

CVE-2024-13513.py

उपयोग बुनियादी उपयोग bash python3 exploit.py -l targets.txt -e [email protected] उन्नत उपयोग bash python3 exploit.py -l targets.txt -e [email protected] -t 100 -o /path/to/results पैरामीटर विवरण पैरामीटर| विवरण| आवश्यकता| डिफ़ॉल्ट ---|---|---|--- -l, --list| लक्ष्य URL वाली फ़ाइल का पथ|...

CVE-2026-62249

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, an authenticated user with access to a project can retrieve the change history of restricted components in that project through nested API change endpoints, even without...

CVE-2020-1472

CVE-2020-1472 POC Richiede l'ultimo impacket da GitHub con le strutture netlogon aggiunte. Tieni presente che di default questo cambia la password dell'account del domain controller. Sì, questo ti permette di fare DCSync, ma rompe anche la comunicazione con gli altri domain controller, quindi fai...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

CVE-2025-4606

CVE-2025-4606 概述 该工具用于测试WordPress上使用 Sala – Startup & SaaS WordPress 主题 的 CVE-2025-4606 漏洞。 此漏洞允许通过账户接管（Account Takeover）实现权限提升，因为该主题在更新密码等敏感数据之前未正确验证用户身份。 因此，未经身份验证的攻击者可以更改其他用户（包括管理员）的密码，从而可能导致完全接管网站。 开发者： Ohang 感谢： @C4p333 目的： 安全研究与教育用途 安装 Termux Pydroid 3 1. 克隆或下载 root@kitploit: git clone...

CVE-2021-41074

CVE-2021-41074 CSRF in Qloapps HotelCommerce 1.5.1 Es gibt eine CSRF in HotelCommerce 1.5.1. Diese kann es jedem ermöglichen, die Admin-E-Mail zu ändern. Wenn ein Angreifer einen Administrator dazu bringt, auf ein bösartig erstelltes HTML-Dokument zu klicken, kann er die Admin-Benutzer-E-Mail...

CVE-2026-77507

Weblate , a web-based continuous localization platform, is affected by an information disclosure vulnerability in its object-scoped RSS feeds prior to version 2026.8 . The root cause is that these feeds fail to enforce the permission checks applied elsewhere, allowing unauthorized users to read c...