CVE-2022-42176

PCSecure V5.0.8.xw - 配置文件中使用硬编码凭据导致管理员面板访问 摘要 厂商: PCTechSoft SAS 产品: PCSecure 受影响版本: 5.0.8.xw 代号: PapiQuieroPollo00 漏洞 类型: 使用硬编码凭据 CWE-798 CVSSv3.1 向量: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSSv3.1 基础评分: 7.8 高危 漏洞利用: 否 CVE ID: CVE-2022-42176 描述 PCSecure V5.0.8.xw 的配置文件 system.bmp...

CVE-2019-6440

CVE-2019-6440: Productos probados: Zemana antimalware v.2.74.2.150 y Zemana antilogger v.2.74.204.150. Corregido desde v.2.74.2.664 Acerca de la vulnerabilidad: Esta vulnerabilidad permitía a los atacantes obtener privilegios SYSTEM en las máquinas objetivo sin interacción del usuario. Requisitos...

CVE-2026-5076

CVE-2026-5076 - Vulnerabilidad de restablecimiento de contraseña de ARMember Información de la vulnerabilidad Elemento| Detalle ---|--- ID de CVE| CVE-2026-5076 Plugin| ARMember – Membership Plugin & Content Restriction Versión afectada| Premium = 7.3.1 Versión corregida| 7.3.2 Puntuación CVSS| 9...

CVE-2018-14847

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos de contraseñas en texto plano. Publicación del blog https://n0p.me/winbox-bug-dissection/ Requisitos Python 3+ Este script NO se ejecutará con Python 2....

CVE-2023-43770-POC

CVE-2023-43770 POC Una prueba de concepto para la vulnerabilidad CVE-2023-43770 recientemente descubierta. Roundcube antes de 1.4.14, 1.5.x antes de 1.5.4 y 1.6.x antes de 1.6.3 permite XSS a través de mensajes de correo electrónico de texto plano con enlaces manipulados debido al comportamiento ...

CVE-2023-43770-PoC

CVE-2023-43770-PoC PoC 针对存储型XSS CVE-2023-43770 漏洞的概念验证 描述 Roundcube 在 1.4.14 之前、1.5.x 在 1.5.4 之前、以及 1.6.x 在 1.6.3 之前的版本，由于 program/lib/Roundcube/rcubestringreplacer.php 的行为，允许通过包含精心构造链接的 text/plain 电子邮件消息进行 XSS 攻击。 攻击链 精心构造的邮件 - 受害者接收并打开邮件 - JavaScript 执行（存储型） PoC 视频：...

Telesquare TLR-2855KS6 - Arbitrary File Creation

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. id: CVE-2021-46418 info: name: Telesquare TLR-2855KS6 - Arbitrary File Creation author: DhiyaneshDK severity: high description: | An unauthorized file creation vulnerability in...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 Vulnerability Description: During the security assessment of the Router firmware, it was observed that sensative information regarding the devices connected to router such as Mobile phone,Laptos, Tablets is...

CVE-2026-54433

CVE-2026-54433: XSS almacenado en correos de texto plano de Roundcube Este repositorio contiene una prueba de concepto configurable en Python para CVE-2026-54433 , una vulnerabilidad de cross-site scripting almacenado en el renderizador de correos de texto plano de Roundcube. Un remitente no...

CVE-2023-36123

CVE-2023-36123 仅供演示用途。此漏洞利用适用于所有版本的 Plain Craft Launcher 2。 下载 Custom.xaml 并导入 Plain Craft Launcher 2，然后点击“运行命令”。 https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

smb

███████╗███╗ ███╗██████╗ ███║ ██╔════╝████╗ ████║██╔══██╗ ║██║ ███████╗██╔████╔██║██████╔╝ ██║ ██ ║██║ ╚════██║██║╚██╔╝██║██╔══██╗ ╚██╗ ██ ╔╝██║ ███████║██║ ╚═╝ ██║██████╔╝ ╚████╔╝ ██║ ╚══════╝╚═╝ ╚═╝╚═════╝ ╚═══╝ ╚═╝ SMB es un protocolo de red que permite compartir archivos, impresoras y otros...

WinboxPoC

WinboxExploit 这是一个针对关键 WinBox 漏洞（CVE-2018-14847）的概念验证，该漏洞允许任意文件读取，从而获取明文密码。 该漏洞早已被修复，因此此项目已终止，不再提供支持或更新。您可以自行 fork 并更新。 博客文章 https://n0p.me/winbox-bug-dissection/ 要求 Python 3+ 此脚本无法在 Python 2.x 或更低版本下运行。 使用方法 该脚本通过命令行中的简单参数使用。 WinBox TCP/IP 利用漏洞并读取密码。 python3 WinboxExploit.py PORT 示例： $ python3...

CVE-2026-14442 Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and...

EUVD-2026-86469

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and...

CVE-2026-14442

Brocade SANnav versions before 3.0.1a are susceptible to an information exposure vulnerability in the job scheduling component . When scheduled support save jobs or related operational tasks are executed, the system fails to properly mask sensitive parameters, leading to the logging of cleartext ...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Entrega de perfiles MDM de iOS a través de HTTP Código del programa servidor MDM Python Flask mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile...

CVE-2025-63820

CVE-2025-63820 Submitter: Nicola Giuffrida Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Vulnerability details When logging into the control panel, the username and password are sent in plain-text:...

ctf

CTF 相关材料 目录 挑战内容见下表。 描述| 活动/游戏| 解决方案 ---|---|--- 堆栈攻击| ---| --- 黑箱| 第1关| 一个带有“登录”功能的可执行文件，密码以明文形式存储在内存中。 黑箱| 第2关| 一个设置了 setuid 为 root 的可执行文件。存在 return-to-libc 漏洞。...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracción de credenciales de usuario para router Hathway mediante SPI flash - CVE-2024-44815 Descripción de la vulnerabilidad: Durante la evaluación de seguridad del firmware del router, se observó que las credenciales de inicio de sesión tanto del portal web como del punto de acceso Wi-Fi se...

CVE-2026-77606

Semantic MediaWiki , a free open-source extension to MediaWiki, is affected by a reflected XSS vulnerability in Special:Ask when the headers=plain option is used. Table header text was emitted into elements via a raw HTML path , allowing user-controlled mainlabel content to become executable HTM...