Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo-Vulnerability-Exploit-CVE-2019-14287 È stato scoperto che Sudo non è affidabile, una delle utility più significative, potenti e comunemente utilizzate installate in quasi tutti i sistemi operativi basati su Unix e Linux come semplice comando. Una falla di bypass della politica di sicurezza...

CVE-2026-80349

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

CVE-2026-80350

OneUptime before version 12.0.7 contains a Server-Side Request Forgery (SSRF) vulnerability in its webhook delivery path. The host-literal screening in Common/Server/Utils/SSRFProtection.ts (function isBlockedHostnameLiteral) rejects private and loopback IPv4 addresses and a limited set of IPv6 f...

EUVD-2026-66389

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-80350 OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

EUVD-2026-66388

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

CVE-2026-80349 TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

CVE-2026-80349

TarsWeb through 3.0.14 contains a critical authentication bypass (CVSS 9.8). The root cause is a combination of two misconfigurations: Koa's proxy option is set to true without restricting trusted upstream proxies, so the source address is taken from the caller-controlled X-Forwarded-For header; ...

CVE-2026-80347

mcp-fetch (npm package @kazuph/mcp-fetch ) through version 1.6.3 contains a Server-Side Request Forgery (SSRF) flaw in its isSafeUrl guard. When a target URL uses an IPv6 literal such as http://[::1]/, the parsed hostname retains the surrounding brackets. The net.isIP check returns zero for the b...

EUVD-2026-66386

mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://::1/ yields the bracketed string, and then tests it with net.isIP. That call returns zero for a...

CVE-2026-80347 mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets

mcp-fetch checks a fetch target against its SSRF guard without removing the brackets that surround an IPv6 literal. isSafeUrl reads the hostname from the parsed URL, which for a literal such as http://::1/ yields the bracketed string, and then tests it with net.isIP. That call returns zero for a...

EUVD-2026-66385

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

cve-2026-39987

cve-2026-39987 Installazione • Uso • Esempi Sto solo provando Go :D Comunque: CVE-2026-39987 PoC: esecuzione remota di codice pre-autenticazione in Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: T...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Bypass-critico-dell-autenticazione- CVE-2025-41646 - Bypass critico dell'autenticazione 🔓 CVE-2025-41646 - RevPi WebStatus PoC di Bypass dell'Autenticazione Una vulnerabilità critica di bypass dell'autenticazione CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 consente a un attaccante...

Cisco-IOS-XE-CVE-2023-20198

Cisco-IOS-XE-CVE-2023-20198 Exploit PoC per CVE-2023-20198 Informazioni sulla vulnerabilità e utilizzo dell'exploit forniti da smokeintilleshell Vedi riferimenti Endpoint, content type HTTP e gestione degli header sono stati modificati rispetto ad altri PoC esistenti per funzionare in situazioni ...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation Questa è una Proof of Concept per CVE-2021-21315 che interessa la libreria System Information per Node.JS pacchetto npm "systeminformation". npmjs.com/systeminformation "assicurati di controllare o sanificare i parametri di servizio che vengono passati a...

https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | PoC della vulnerabilità di esecuzione remota di codice di Microsoft Outlook 📜 Descrizione Questo script presenta una prova di concetto PoC per CVE-2024-21413, una significativa vulnerabilità di sicurezza scoperta in Microsoft Outlook con un CVSS di 9.8. Denominato bug MonikerLink...

GPON

RCE sui router domestici GPON CVE-2018-10561 Vulnerabilità Molti router oggi utilizzano la connessione GPON, ed è stato trovato un modo per bypassare tutta l'autenticazione sui dispositivi CVE-2018-10561 da VPNMentor. Con questo bypass dell'autenticazione, è anche possibile scoprire un'altra...

POC-CVE-2025-29927

CVE-2025-29927: PoC del Bypass del Middleware Next.js Panoramica Questo PoC dimostra CVE-2025-29927, una vulnerabilità nel middleware Next.js che consente agli attaccanti di bypassare i meccanismi di autenticazione, autorizzazione e CSP utilizzando l'header x-middleware-subrequest. Versioni...

CVE-2020-11651

CVE-2020-11651 Uno script che sfrutta SaltStack CVE-2020-11651 e CVE-2020-11652 per aggiungere nuovi utenti a un master Salt vulnerabile inserendo voci in /etc/passwd e /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author:...