CVE-2020-14882-14883

CVE-2020-14882&14883 Weblogic ist ein von Oracle entwickelter J2EE-Anwendungsserver. CVE-2020-14882 ist eine Schwachstelle für nicht autorisierten Zugriff auf die Console; der Schweregrad der Schwachstelle wird als kritisch eingestuft, mit einer Bewertung von 9.8. CVE-2020-14883 ermöglicht unter...

CVE-2024-53476

CVE-2024-53476 Descrizione SimplCommerce è affetto da una vulnerabilità di race condition nella logica di checkout, che consente a più utenti di acquistare più prodotti di quelli disponibili in magazzino tramite richieste di checkout simultanee. Metodo di Rilevamento Un attaccante può rilevare...

CVE-2026-82468

Rodauth versions before 2.47.0 contain a cross-site request forgery (CSRF) protection bypass in the JSON request content type validation. An attacker can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation, forcing victims to aut...

CVE-2023-44487

Si prega di notare che il codice sopra utilizza la libreria libcurl per effettuare richieste HTTP. È necessario installare libcurl e collegarlo durante la compilazione del codice. Il codice è una versione semplificata e potrebbe essere necessario modificarlo in base ai requisiti specifici e al...

westone-CVE-2022-1388-scanner

westone-CVE-2022-1388-scanner Richieste non divulgate possono bypassare l'autenticazione REST di iControl. Installazione e Utilizzo git clone https://github.com/Osyanina/westone-CVE-2021-21980-scanner.git cd westone-CVE-2022-1388-scanner cmd CVE-2022-1388.exe...

CVE-2024-7954POC

CVE-2024-7954POC In der porteplume-Plugin-Version vor SPIP 4.30-alpha2, 4.2.13, 4.1.16 existiert eine Schwachstelle zur beliebigen Codeausführung. Ein entfernter, nicht authentifizierter Angreifer kann durch Senden einer speziell gestalteten HTTP-Anfrage beliebigen PHP-Code als SPIP-Benutzer...

CVE-2023-27163-exploit

CVE-2023-27163 — request-baskets SSRF Exploit Ho scritto questo exploit per colpire CVE-2023-27163 , una vulnerabilità di Server-Side Request Forgery SSRF presente in request-baskets versioni ≤ 1.2.1. Il difetto risiede nell'endpoint /api/baskets/name, dove il parametro forwardurl consente a un...

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — Vulnerabilità Critica del Server React 🧠 Cos'è ⚛️ Una falla di sicurezza critica in React Server Components RSC 🧨 Causata da deserializzazione non sicura 🌐 Sfruttabile tramite richieste di rete 🔓 Nessuna autenticazione richiesta ☠️ Può portare a Esecuzione di codice remoto RCE ✅...

CVE-2021-46070

CVE-2021-46070 Titolo dell'exploit: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIO Riferimenti:...

BurpSuite-Team-Extension

BurpSuite-Team-Extension Questo plugin Burpsuite consente a più tester di condividere in tempo reale richieste proxy live/storiche, scope e payload Repeater/Intruder, permettendo un testing di applicazioni web davvero collaborativo. Quando sei connesso al Team Server e in una stanza del team, tut...

CVE-2025-55182

Strumento di rilevamento e sfruttamento della vulnerabilità CVE-2025-55182 Introduzione al progetto Questo strumento è un'applicazione GUI sviluppata con Java Swing per rilevare e sfruttare la vulnerabilità CVE-2025-55182. Tale vulnerabilità è un difetto di sicurezza nel framework Next.js che...

EUVD-2026-67951

IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-55784

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

GHSA-334Q-H5G3-FPXV free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Summary The AUSF component of free5GC stores per-subscriber authentication state in a global sync.Map keyed only by SUPI. Every incoming authentication request creates a new AusfUeContext and stores it under that SUPI key without checking whether an authentication procedure is already in progress...

EUVD-2026-68016

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

CVE-2026-55784

free5GC is an open-source 5G core network implementation. In versions 1.4.4 and earlier , the AUSF component stores per-subscriber authentication state in a global sync.Map keyed only by SUPI . Because each request unconditionally replaces the active context for that SUPI, an attacker with access...

CVE-2026-76649

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-18545

IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2026-18545

IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...