298338 matches found
CVE-2024-1086
CVE-2024-1086 Exploit Proof-of-Concept universale per escalation dei privilegi locali per CVE-2024-1086, funzionante sulla maggior parte dei kernel Linux tra v5.14 e v6.6, inclusi Debian, Ubuntu e KernelCTF. Il tasso di successo è del 99.4% nelle immagini KernelCTF. Versioni interessate L'exploit...
tools-for-CVE-2018-1000001
Strumenti per CVE-2018-1000001 Controlla vulnerabilità: $ cat /proc/sys/kernel/unprivilegedusernsclone Uscita: 1 Se il file "/proc/sys/kernel/unprivilegedusernsclone" non esiste: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd; realpath .; kill -9 $!" L'output deve...
WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin WP User Frontend Pro versions = 4.2.13...
WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin User Registration versions = 5.2.7...
linux
.. include:: ../disclaimer-ita.rst :Original: :ref:Documentation/admin-guide/README.rst .. itreadme: Rilascio del kernel Linux 6.x http://kernel.org/ .. warning:: TODO ancora da tradurre...
CVE-2026-97332
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
CVE-2015-1328
CVE-2015-1328 Prova di concetto Un exploit di prova di concetto PoC per CVE-2015-1328, una vulnerabilità di escalation dei privilegi che colpisce l'implementazione overlayfs del kernel Linux. Questa vulnerabilità consente a utenti locali non privilegiati di ottenere accesso root sfruttando...
CVE-2026-97332
The User Private Files WordPress plugin, in versions before 2.2.0 , is vulnerable to unauthenticated private file disclosure on multisite installations. The root cause is a rewrite rule bypass where requests to stored private files do not route through the plugin's required access check. This all...
CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
EUVD-2026-92076
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
WordPress User Private Files plugin < 2.2.0 - Unauthenticated Private File Disclosure vulnerability
Unauthenticated Private File Disclosure vulnerability discovered by Akshat Parikh SN1PER in WordPress Plugin User Private Files versions 2.2.0...
CVE-2026-105099
A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...
EUVD-2026-92070
A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2026-105099 Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scripting
A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...
EUVD-2026-92044
W vincent-peugnet/wcms through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the login user field and visitor comment website field. Attackers can submit failed logins rendered unescaped in the adminlog.php log viewer, or...
CVE-2026-105124
W vincent-peugnet/wcms through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the login user field and visitor comment website field. Attackers can submit failed logins rendered unescaped in the adminlog.php log viewer, or...
PT-2026-104630
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...
CVE-2026-97332: Undefined Security Weakness
The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...
CVE-2026-105206: Incorrect Authorization
ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...