328401 matches found
casper-shell
🦇 Casper@shell: - Shell Web PHP Avanzado Casper@shell: es una versión mejorada y más fácil de usar de p0wny shell, con muchas nuevas funcionalidades. Esta versión tiene como objetivo ser más útil para realizar rápidamente reconocimiento, exfiltración o implementar mecanismos de persistencia. ✨...
CVE-2026-90923
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...
EUVD-2026-81353
The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...
EUVD-2026-81351
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.8 does not perform an ownership or authorization check before rendering booking confirmation details, allowing unauthenticated attackers to retrieve registered attendees' personal information full name, email address, phone...
EUVD-2026-81350
The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...
EUVD-2026-81343
The Newsletter WordPress plugin before 9.3.8 does not generate its email tracking signing key with sufficient entropy and signs its tracking links with an unkeyed hash, allowing an unauthenticated attacker who recovers that key offline to forge tracking links, obtain any subscriber's session toke...
CVE-2025-55182-GUI
CVE-2025-55182 취약점 탐지 및 활용 도구GUI 버전 프로젝트 소개 본 프로젝트는 CVE-2025-55182 고위험 취약점을 대상으로 한 시각화 탐지 및 활용 도구로, Python + tkinter 기반의 완전한 그래픽 조작 인터페이스를 제공하여 복잡한 명령줄 조작 없이도 사용 편의성과 실용성을 겸비했습니다. CVE-2025-55182 취약점은 React Server ComponentsRSC 생태계의 Next.js 프레임워크에 존재하며, 공격자는 악의적인 multipart/form-data 요청을 구성하여 원격 명령...
CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component
CVE-2026-22010 – Android Intent Redirection to Exported Component Program Code Java/Android simulation root@kitploit: // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incomin...
CVE-2026-25282
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...
CVE-2026-24074
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations...
CVE-2025-32432
🔐 CVE-2025-32432 — Craft CMS RCE sin autenticación previa Ejecución remota de código sin autenticación previa en Craft CMS Descubierto y desarrollado porMohammed Idrees Banyamer 📌 Descripción general CVE-2025-32432 es una vulnerabilidad crítica de ejecución remota de código RCE sin autenticación...
CVE-2025-55182-NextJS-RCE-PoC
Entorno de Reproducción CVE-2025-55182 React2Shell ⚠️ SOLO CON FINES EDUCATIVOS Este repositorio se crea estrictamente con fines educativos y de investigación. Demuestra una vulnerabilidad crítica en los Componentes del Servidor React Next.js para ayudar a los desarrolladores a comprender los...
CVE-2025-32421
CVE-2025-32421 Eclipse Technique Lab Comprehensive demonstration of CVE-2025-32421 Eclipse technique - a sophisticated race condition attack against Next.js 15.0.4 that bypasses the original CVE-2024-46982 patch. WARNING - EDUCATIONAL PURPOSE ONLY This laboratory is designed exclusively for:...
CVE-2026-25283 Stack-based Buffer Overflow in OOBM
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size...
CVE-2026-25283
CVE-2026-25283 is a stack-based buffer overflow in OOBM , a component maintained by Qualcomm . The vulnerability is caused by memory corruption when unverified data from an external source is copied into a buffer larger than the allocated size. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a...
CVE-2026-25282 Out-of-bounds Read in OOBM
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...
CVE-2026-25282
CVE-2026-25282 is an out-of-bounds read in the OOBM component of a Qualcomm product. The vulnerability is triggered when unverified data from a neighboring system is processed, causing an out-of-bound memory access that results in a transient denial of service . The CNA-assigned CVSS 3.1 score is...
EUVD-2026-81321
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations...
CVE-2026-24074
CVE-2026-24074 is an out-of-bounds write in a Video component on Qualcomm platforms. The root cause is memory corruption that occurs when data with large offset and length values exceeds buffer limits during data copy operations. The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low co...