EUVD-2026-78647

Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 HiveNightmare verificador de vulnerabilidad y solución alternativa Flujo El script tiene el siguiente flujo: Requiere ejecutarse con privilegios de Administrador Comprueba si la versión de Windows 10 está afectada por la vulnerabilidad. SI está afectado por la...

CVE-2022-34961

OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 漏洞说明： 发现 OpenTeknik LLC OSSN 开源社交网络 v6.3 LTS 在 用户时间线 模块中存在存储型跨站脚本（XSS）漏洞。 攻击向量： 攻击者必须在 用户时间线 上发布内容，并在位置输入处插入 XSS 载荷才能利用该存储型 XSS。提交后 XSS 载荷将立即触发。 受影响组件： http://ipaddress:port/ossn/u/username POST...

CVE-2021-42205

CVE-2021-42205 ELAN Miniport 触控板 Windows 驱动程序（版本 24.21.51.2 之前，用于多个制造商的 PC 硬件）允许本地用户通过发送特定的 IOCTL 请求导致系统崩溃，因为该请求被处理了两次。 认证| 复杂性| 向量 ---|---|--- 不可用| 不可用| 不可用 机密性| 完整性| 可用性 ---|---|--- 不可用| 不可用| 不可用 CVSS 评分：不可用 参考链接...

CVE-2026-108110

MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or...

CVE-2026-108110 MOVO through 0.2.3 Authorization Bypass via Document Endpoints

MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supplying arbitrary object paths. Attackers who know a target's object path can send it to /api/documents/fetch or...

BIT-GHOST-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

BIT-GHOST-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2025-14123

The Redux Framework plugin for WordPress (versions up to and including 4.5.11 ) is vulnerable to privilege escalation . The root cause is the plugin saving arbitrary meta keys under a registered option name without sufficient capability checks or key allowlist restrictions. This allows authentica...

import-users-from-csv-with-meta

import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - 未授权认证用户导出...

CVE-2023-28252-

CVE-2023-28252- Detección del exploit CVE-2023-28252 Control de creación de archivos en el directorio donde el exploit deja archivos utilizados para la explotación, según una ruta fija en las carpetas "C:\Users\Public", "C:\Users\Public.container", "C:\Users\Public\MyLog.blf" y "C:\Users\Public\p...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. id: CVE-2024-3552 info: name: Web Directory Free 1.7.0 - SQL...

pfSense - Arbitrary File Write

diagroutes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection...

CVE-2026-107793

Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that allows authenticated users to delete other users' subscriptions by ID. Attackers can submit a delete action to /account/protected/sub/subSaveAction with another user's...

CVE-2026-107797 Jivejdon through 5.0 Reflected XSS via postThread.jsp to and tag Parameters

Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag parameters. Attackers can send crafted links to authenticated users, breaking out of unencoded inline JavaScript string...

CVE-2026-107706 Dolibarr before 24.0.2 Incorrect Authorization via updateextrafield.php

Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield values. Authenticated users with read-only access can POST objectType, objectId, field and value parameters to...

UnrestrictedUserCreator

No funciona en Samsung, lo siento. Samsung deshabilitó la función de múltiples usuarios en favor de la carpeta segura. adb push exploit.sh /data/local/tmp adb shell chmod +x /data/local/tmp/exploit.sh adb shell /data/local/tmp/exploit.sh...