381028 matches found
CVE-2023-1454-EXP
CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot Vulnerabilidad de inyección SQL no autorizada JeecgBoot es una plataforma de desarrollo de bajo código basada en generadores de código. La plataforma Java de bajo código jeecg-boot v3.5.0 para aplicaciones web empresariales presenta la última...
CVE_2021_27850_POC
Uso de comandos git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command 假设 hmac key为 change this immediately...
engeman-web-language-combobox-sqli
Engeman Web = 12.0.0.2 Password Recovery Page Load Unauthenticated SQL Injection Proof of concept for exploitation of the vulnerability described in CVE-2025-8220, which concerns the possibility of SQL Injection during the password recovery page load in the Engeman Web software. Description A...
CVE-2025-32013
CVE-2025-32013 Aviso de Seguridad y PoC para CVE-2025-32013 Cómo Usar 1. Comience aquí: Lea este archivo README para obtener una visión general de la estructura y el contenido del repositorio. 2. Aviso de Seguridad Interno: Abra 01SecurityAdvisory.md para ver el informe detallado que aborda la...
CVE-2023-22527-POC
CVE-2023-22527: Vulnerabilidad de Atlassian Confluence Introducción La vulnerabilidad CVE-2023-22527 es una falla de seguridad crítica en Atlassian Confluence, una plataforma de colaboración y documentación ampliamente utilizada. Esta vulnerabilidad existe tanto en Confluence Data Center como en...
CVE-2025-55182-Scanner
🛡️ Escáner CVE-2025-55182 React2Shell Desarrollado por:SainiON Hacks Una herramienta GUI independiente para detectar y demostrar la vulnerabilidad de Ejecución Remota de Código RCE en React Server Components CVE-2025-55182 en aplicaciones Next.js. 📺 Demostración y Tutorial Mira el desglose complet...
CVE-2026-42945
CVE-2026-42945 PoC Go Chino | English Herramienta auxiliar de detección y explotación para la implementación HTTP/2 de nginx CVE-2026-42945, utilizada para verificar si la vulnerabilidad existe en entornos autorizados , comparar los efectos de la corrección y reproducir el comportamiento del PoC ...
EUVD-2026-95032
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565
A flaw in luksmeta allows a local attacker with administrative privileges to cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. The root cause is identified as incorrect boundary calculations and flawed overlap detection within the luks1 metadata allocator. Con...
CVE-2026-107565
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-107565
A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...
CVE-2026-90460
A flaw was found in OpenStack Keystone. Tokens obtained via delegated authentication methods trusts, application credentials, OAuth1 access tokens can move a credential to an unauthorized project by supplying a new projectid in a PATCH /v3/credentials request, because only the pre-update project ...
CVE-2026-79993
A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...
CVE-2020-11019
CVE-2020-11019 In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0. authentication| complexity|...
cve-2025-66478_rce_vulnerable
Blog Moderno con shadcn/ui Un blog moderno y elegante construido con Next.js 16, React 19, shadcn/ui y Tailwind CSS. IMPORTANTE: Proyecto de Next JS VULNERABLE creado solo para fines educativos, de pruebas y explotación, NO SE RECOMIENDA INSTALACIÓN EN PRODUCCION, SÓLO PARA ÁMBITO LOCAL O ENTORNO...
CVE-2023-30146
CVE-2023-30146 - Exploit de Cámara Web Assmann/HooToo - Exposición de Datos Sensibles Descripción Se descubrió un problema en las cámaras IP de las marcas HooToo y Assmann. El firmware almacena las credenciales del administrador y del usuario en la copia de seguridad en texto plano. La copia de...
CVE-2024-0044-EXP
CVE-2024-0044-EXP Explotación de CVE-2024-0044 para realizar copias de seguridad de datos en Android 12 y 13 anteriores a la actualización de seguridad de marzo de 2024. Uso ./CVE-2024-0044-EXP.sh Ejemplo ./CVE-2024-0044-EXP.sh com.tencent.mm Explicación Descubrimiento de la vulnerabilidad...