CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – Écriture Modbus TCP sur des bobines en lecture seule via l’usurpation de code de fonction Code du programme simulation Python avec pymodbus root@kitploit: modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.devi...

CVE-2026-82833

An improper access control vulnerability exists in the ExampleDetail function of the Project Example Detail Endpoint (/v1/projects/1/examples/) in Doccano (open-source annotation tool for ML practitioners), affecting versions up to 1.8.5 . The flaw allows a remote attacker with low privileges to ...

CVE-2018-20343

CVE-2018-20343 यह CVE-2018-20343 के लिए एक PoC है, जो केन सिल्वरमैन के Build Engine में एक कमजोरी है। उत्पन्न .map फ़ाइल बफर ओवरफ्लो को ट्रिगर करती है और स्टैक को ओवरराइट करती है जैसा कि नीचे दिखाया गया है: Open Watcom डॉसबॉक्स 0.74-2 के तहत: विश्लेषक स्टैक को नियंत्रित करता है FreeDos 1.2 के तहत...

CVE-2026-82820

A vulnerability was found in FLVMeta up to 1.2.2. Affected is the function amfstringnew of the file src/amf.c of the component AMF String Processing. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. The exploit has been made publi...

CVE-2023-31308

A malicious virtual function can invoke certain command handlers in the SMU , causing a denial of service due to an out-of-bounds memory read . Per AMD's CVSS 3.1 rating, the impact is LOW (3.3) with a local attack vector requiring low privileges and no user interaction, affecting only availabili...

CVE-2023-31308

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...

EUVD-2023-60610

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...

CVE-2026-82815

A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The...

CVE-2021-2471

CVE-2021-2471 - MySQL Connector/J में XXE Oracle MySQL के MySQL Connectors उत्पाद में भेद्यता घटक: Connector/J। प्रभावित समर्थित संस्करण 8.0.26 और उससे पहले के हैं। इस भेद्यता के सफल हमलों के परिणामस्वरूप महत्वपूर्ण डेटा तक अनधिकृत पहुंच या सभी MySQL Connectors सुलभ डेटा तक पूर्ण पहुंच और MySQL...

CVE-2026-82815

MegaEase EaseProbe (up to version 2.3.0) contains an improper access control flaw in the realIP function of web/server.go (Middleware component). An attacker can manipulate the X-Forwarded-For , X-Real-IP , or True-Client-IP headers to bypass access controls. The attack is remote , requires no pr...

CVE-2026-82813

CVE-2026-82813 affects TubeBuddy for YouTube Extension (BEN Group) up to version 5.8.4 on Chrome. The vulnerability resides in the TBGlobal.GetToken function within the file tubebuddymaster1.js , where insufficient verification of data authenticity occurs when the argument t/c/r is manipulated. A...

CVE-2026-82813 BEN Group TubeBuddy for YouTube Extension tubebuddymaster1.js TBGlobal.GetToken data authenticity

A vulnerability was detected in BEN Group TubeBuddy for YouTube Extension up to 5.8.4 on Chrome. This impacts the function TBGlobal.GetToken of the file tubebuddymaster1.js. The manipulation of the argument t/c/r results in insufficient verification of data authenticity. It is possible to launch...

CVE-2026-82802

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handler.js of the component granules Endpoint. Executing a manipulation of the argument openSearchOsdd can lead to...

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number उदाहरण: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 ट्विटर: @0w4ys...

CVE-2026-51697

Incorrect access control in the setIptvCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter IPTV service configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51683

Incorrect access control in the setLanCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter LAN network configuration via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

React2Shell

@React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React Server Remote Code Execution RCE Exploit root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ MAGENTA...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - अप्रमाणित मनमाना फ़ाइल अपलोड CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 गंभीर 📝 विवरण वर्डप्रेस के लिए HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. प्लगइन में tempfileupload फंक्शन में फ़ाइल प्रकार सत्यापन की कमी के कारण स...

CVE-2026-51680

Incorrect access control in the setLedCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to modify LED behavior via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2024-7627-PoC

CVE-2024-7627-PoC पृष्ठभूमि यह प्रमाण-अवधारणा PoC स्क्रिप्ट WordPress प्लगइन Bit File Manager संस्करण 6.0 - 6.5.5 में रेस कंडीशन CVE-2024-7627 के माध्यम से बिना प्रमाणीकरण के दूरस्थ कोड निष्पादन कमजोरी के लिए है। जानकारी विवरण: WordPress के लिए Bit File Manager प्लगइन संस्करण 6.0 से 6.5.5 में...