westone-CVE-2021-37580-scanner

westone-CVE-2021-37580-scanner Apache Shenyu ist eine erweiterbare, leistungsstarke und reaktionsfähige API-Gateway-Lösung, die in allen Microservice-Szenarien eingesetzt wird. In Apache Shenyu admin existiert eine Sicherheitslücke zur Umgehung der Authentifizierung. Die unsachgemäße Verwendung v...

CVE-2018-8062

CVE-2018-8062 XSS persistente sul router Comtrend AR-5387un Spiegazione dello sfruttamento: Per sfruttare questa vulnerabilità, una volta effettuato l'accesso al router, è necessario creare un servizio WAN Fare clic su "Advanced Setup", "WAN Service". "Add button", "Next" Quindi inserire il paylo...

CVE-2022-1388

CVE-2022-1388 في إصدارات F5 BIG-IP 16.1.x الأقدم من 16.1.2.2، وإصدارات 15.1.x الأقدم من 15.1.5.1، وإصدارات 14.1.x الأقدم من 14.1.4.6، وإصدارات 13.1.x الأقدم من 13.1.5، وجميع إصدارات 12.1.x و11.6.x، قد تتجاوز الطلبات غير المعلنة مصادقة iControl REST. استخدم أمر cURL التالي في سطر واحد لاختبار هذه...

The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

CVE-2025-3102

🔐 CVE-2025-3102 – Bypass dell'autenticazione nel plugin WordPress SureTriggers 🚨 CVE-2025-3102 è una vulnerabilità critica di bypass dell'autenticazione che colpisce il plugin WordPress SureTriggers: All-in-One Automation Platform , installato attivamente su oltre 100.000 siti web. A causa della...

cve-2026-69243-poc-aiohttp-smuggling

CVE-2026-69243 — aiohttp Request-Smuggling CWE-444 Request-Smuggling über abgelehntes WebSocket-Upgrade in aiohttp Oder die Rust-Version bauen keine Abhängigkeiten, nur Standardbibliothek: root@kitploit: git clone https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling cd...

php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Outil d'exploitation Outil automatisé de test pour la vulnérabilité d'injection de paramètres PHP-CGI , prenant en charge les CVE-2024-4577 et CVE-2024-8926 , permettant des opérations telles que l'exécution de commandes, le téléchargement et le...

CVE-2026-15985 Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login

The Classified Listing - Mobile Number Verification plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.6.0. This is due to missing server-side Firebase OTP validation in the processotplogin function. This makes it possible for unauthenticated...

CVE-2019-16278

CVE-2019-16278 Nostromo-Webserver – Exploit-Skript für Remote-Befehlsausführung Einführung Eine durch Verzeichnisübergang Path Traversal verursachte Schwachstelle zur Remote-Befehlsausführung. Wie bei CVE-2011-0751 ist die Filterung nicht streng genug, sodass ein Bypass mit %0d möglich ist...

CVE-2024-45337-POC

CVE-2024-45337-POC Proof of Concept POC für CVE-2024-45337 Build root@kitploit: go version go version go1.23.2 linux/amd64 go build Verwendung root@kitploit: Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey tha...

CVE-2019-17662

CVE-2019-17662 Implementazione Python dell'exploit di lettura arbitraria di file TinyVNC CVE-2019-17662 che porta al bypass dell'autenticazione Basato sulla PoC EDB originale di Nikhith Tumamlapalli ID EDB: 47519 L'exploit PoC originale non funziona a causa della normalizzazione dei percorsi nell...

CVE-2024-4040

CVE-2024-4040 Una vulnerabilità di server side template injection in CrushFTP in tutte le versioni precedenti alla 10.7.1 e 11.1.0 su tutte le piattaforme consente a utenti remoti non autenticati di leggere file dal filesystem al di fuori della VFS Sandbox, aggirare l'autenticazione per ottenere...

CVE-2026-63041 Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass by sending certain values that the attach-consumer-label plugin does not sanitise correctly. This issue affects Apache...

CVE-2026-63041 Apache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privilege or perform an authorization bypass by sending certain values that the attach-consumer-label plugin does not sanitise correctly. This issue affects Apache...

CVE-2025-34085

📂 Simple File List – Exploit RCE non autenticato CVE-2025-34085 ⚠️ Codice exploit di: Mrj Haxcore Uno script Python completamente funzionante per il plugin WordPress Simple File List = 4.2.3, vulnerabile a esecuzione remota di codice RCE non autenticata a causa di una logica non sicura di...

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit Boîte à outils d'exploitation CVE-2025-0316 🚨 Exploit de contournement d'authentification pour le plugin WordPress WP Directorybox Manager 🔥 Script d'exploitation automatisé pour CVE-2025-0316 — Contournement d'authentification via une action AJAX vulnérable. ⚠️ Avis légal Ce...

CVE-2025-32433

CVE-2025-32433 Resumo e visão geral do ataque da CVE-2025-32433 A CVE-2025-32433 é uma vulnerabilidade crítica de execução remota de código RCE não autenticada no servidor SSH do Erlang/OTP, divulgada em 16 de abril de 2025. O Erlang/OTP SSH é uma biblioteca usada em várias aplicações distribuída...

CVE-2024-54085

CVE-2024-54085: Vulnerabilità critica di bypass dell'autenticazione in AMI MegaRAC BMC Sistemi interessati La vulnerabilità interessa un'ampia gamma di hardware server dei principali produttori: AMI MegaRAC SPx : versioni 12.x fino alla 12.7 e 13.x fino alla 13.5 HPE Cray XD670 : versioni 1.09,...

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 SQL-Injection in Online-Food-Ordering-Web-App Die Online-Food-Ordering-Web-App ist anfällig für unauthentifizierte Fehler- und zeitbasierte blinde SQL-Injection-Angriffe. Der username-Parameter auf der /login.php-Seite bereinigt die Benutzereingabe nicht, sodass ein...