CVE-2022-38577-Processmaker

此仓库已归档并迁移至：https://github.com/sornram9254/CVE-BBP-VDP ProcessMaker - 用户配置文件权限提升 CVE-2022-38577 ProcessMaker v3.5.4 之前版本被发现用户配置文件页存在不安全的权限。该漏洞允许攻击者将普通用户提升为管理员。 此漏洞可与 Metasploit 模块 ProcessMaker Plugin Upload - exploit/multi/http/processmakerpluginupload 一起使用，以获得系统访问权限。 root@kitploit: Privilege...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-未授权信息泄露 本仓库包含 Dodge Industrial Team 为 Dodge OPTIFY 平台发现的 CVE-2023-31445 的描述。 CVE ID: CVE-2023-31445 厂商: Cassia Networks 产品: Access Controller 版本: Cassia-AC-2.1.1.2203171453 漏洞类型: 未授权信息泄露 影响范围: 日志、用户数据 描述: 只读用户能够枚举所有其他用户，并泄露所有其他用户的电子邮件地址、电话号码和权限等信息。这可能导致进一步的攻击步骤，如定向电子邮件活动和社交工程攻击。 状态...

CVE-2026-77807 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the username Parameter. This makes it possible for unauthenticated attackers to read the conten...

CVE-2026-77807

CVE-2026-77807 is a Directory Traversal vulnerability in the AcyMailing WordPress plugin (all versions up to and including 11.0.4 ), accessible via the user[name] parameter. An unauthenticated attacker can read arbitrary files on the server, potentially exposing sensitive information. Exploitatio...

arachni-ui-web

通知 Arachni 正逐步走向淘汰，试试其下一代继任者 Ecsypno SCNR 吧！ Arachni - Web 用户界面 版本| 0.6.1.1 ---|--- 主页| http://arachni-scanner.com 博客| http://arachni-scanner.com/blog Github| http://github.com/Arachni/arachni-ui-web 文档| https://github.com/Arachni/arachni-ui-web/wiki 支持| http://support.arachni-scanner.com 作者| Tas...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value

Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value Summary Calendar events carry a free-form meta object that is stored exactly as submitted, with no validation of the values inside it. The scheduler reads the per-event alert offset out of that object ...

EUVD-2026-75171

Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value...

EUVD-2026-75172

Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle...

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...

CVE-2026-87958

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions...

CVE-2026-81268

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation...

CVE-2025-15030

CVE-2025-15030 用户档案生成器 3.15.2 - 未经身份验证的任意密码重置 CVE-2025-15030 用户档案生成器 — 未经身份验证的密码重置 → 管理员接管 + Shell 上传 root@kitploit: / / \ |/ / / / / / \ / / / \ / \ | / | | //| \ / /| / | / /| \ | || | / | / || / | | | // | /\/ /| /|/ /\ |\| |\ || /| \ || /| // \ //// ////// ❶ 漏洞详情...

CVE-2026-19646

IBM Common Licensing Agent and IBM ART (Administration and Reporting Tool) versions 9.0, 9.0.0.1, and 9.0.0.2 are affected by improper validation of the HTTP Host header , allowing a remote attacker to redirect users to an arbitrary domain without authentication. The vulnerability is rated CVSS 9...

CVE-2026-81941 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege level of the application process by constructing a flow with an MCP Tools component configured to use a local stdio subprocess...

CVE-2026-81268 Langflow is vulnerable to authentication bypass and insufficient session expiration

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation...

CVE-2026-81268

IBM Langflow OSS 1.0.0–1.11.5 is vulnerable to authentication bypass and insufficient session expiration due to two distinct flaws. First, MCP HTTP API credential resolvers fail to apply the AUTO_LOGIN API-key guard that standard endpoints enforce, causing unauthenticated requests to MCP endpoint...

CVE-2026-5173

🦊 CVE-2026-5173：GitLab WebSocket 未授权方法执行 PoC 🛠️ 概述 CVE-2026-5173 允许低权限的已认证攻击者通过 GitLab 的 WebSocket（/-/cable）端点调用受限的后端方法，尤其是通过 GraphqlChannel。 这可能导致敏感数据泄露 （高机密性）以及有限的未授权操作。 受影响版本 GitLab CE/EE：16.9.6 至 18.8.8 18.9 早于 18.9.5 18.10 早于 18.10.3 已修复版本 ：18.8.9 • 18.9.5 • 18.10.3 ⚡ 功能特性 简洁现代的 Python 3 PoC...

CVE-2026-86087

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 are affected by a vulnerability that allows an authenticated user to send a specially crafted request to write arbitrary files on the system. The CVSS v3.1 score is 4.3 (MEDIUM) with a network attack vector, low complexity, low priv...

CVE-2026-86087 IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system...