CVE-2025-65950

CVE-2025-65950: WBCE CMS ist anfällig für zeitbasierte Blind-SQL-Injection über den groups-Parameter Übersicht c. Erfassen Sie die POST-Anfrage, die an /wbce/admin/users/save.php gesendet wird, wenn die Schaltfläche „Speichern“ angeklickt wird...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map nutzt OpenStreetMap und die offizielle Telegram-Bibliothek, um die Position von Benutzern in der Nähe zu finden. Bitte beachten Sie: Die Telegram-API wurde vor einiger Zeit aktualisiert, um die Entfernungsangaben zu nahegelegenen Benutzern ungenauer zu...

CVE-2026-64638

CVE-2026-64638 Donazioni Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambien...

EUVD-2026-42986

Snipe-IT has missing object-level authorization in Kits API...

EUVD-2026-42994

Snipe-IT has an authorization bypass on print inventory page...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

CVE-2026-82283

VoltAgent through 2.1.20 contains an authorization flaw in its memory API handlers , which fail to validate conversation ownership . An authenticated attacker can supply caller-controlled identifiers to memory endpoints to read, modify, or delete conversations and messages belonging to other user...

CVE-2026-82271 R2R Missing Ownership Check Allows Modifying Other Users' Conversations

R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users' conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users'...

CVE-2026-3629

CVE-2026-3629 - Controllo di Escalation dei Privilegi WordPress Uno strumento da riga di comando per rilevare CVE-2026-3629 , una vulnerabilità critica di escalation dei privilegi nel plugin WordPress "Import and export users and customers". 📢 Unisciti alla Nostra Community Rimani aggiornato con...

CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 ist anfällig für willkürlichen Datei-Upload WordPress Front-End Users Plugin Exploit Schwachstelleninformationen Plugin-Name : Front-End Users Plugin Betroffene Version : = 3.2.32 Schwachstellentyp : Arbitrary File Upload CVSS-Score : 10...

CVE-2026-82243

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

CVE-2026-9491

A server-ide request forgery SSRF vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote authenticated users to obtain non-sensitive information...

CVE-2026-9548

Synology Chat Server versions prior to 2.4.5-22148 are affected by a Cross-Site Scripting (XSS) vulnerability in the extract domain function, caused by improper neutralization of input during web page generation. A remote authenticated user with low privileges can exploit this via a UI interactio...

CVE-2026-40541

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...

CVE-2023-28252-

CVE-2023-28252- Erkennung des Exploits CVE-2023-28252. Überwachung der Dateierstellung in dem Verzeichnis, in dem der Exploit die für die Ausnutzung verwendeten Dateien hinterlässt, auf dem festen Pfad im Ordner "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" und...

CVE-2025-32462

CVE-2025-32462 – sudo POC-Skript Dies ist ein CVE‑2025‑32462 -Erkennungsskript für Privilege Escalation, das zwei Modi bietet: direkte sudo-Erkennung und Erkennung von Traversal durch nicht privilegierte Benutzer. Dateistruktur Datei| Beschreibung ---|--- poc.sh| Schwachstellen-Verifizierungsdate...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

import-users-from-csv-with-meta

import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - Exportação Não Autorizada de Usuários Autenticados...

CVE-2022-47447

CVE-2022-47447 POC CSRF - CVE-2022-47447 ⚠️ Uso esclusivo per scopi educativi e ambienti autorizzati. PoC funzionale per la vulnerabilità CVE-2022-47447, che colpisce un plugin WordPress vulnerabile, consentendo un attacco di tipo Cross-Site Request Forgery CSRF contro utenti autenticati. URL...