linux-4.1.15_CVE-2023-4128

Релиз ядра Linux 4.x http://kernel.org/ Это примечания к выпуску для Linux версии 4. Внимательно прочитайте их, так как они рассказывают вам, о чём всё это, объясняют, как установить ядро, и что делать, если что-то пошло не так. ЧТО ТАКОЕ LINUX? Linux — это клон операционной системы Unix,...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 nuclei template Joomla CVE-2023-23752 - параметр запроса пробивает Rest API Затронутые версии ​ Joomla имеет примерно три точки входа маршрутизации: 1. index.php в корневом каталоге пользователи получают доступ к статьям 2. administrator/index.php в корневом каталоге...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

WAMpage

WAMpage WAMpage - цепочка эксплойтов LPE для получения root на WebOS CVE-2022-23731 Этот эксплойт в первую очередь интересен другим исследователям - если вы просто хотите получить root на своём телевизоре, вам, вероятно, подойдёт RootMyTV, который предлагает надёжный постоянный root в один клик. ...

grafana-CVE-2018-15727

Эксплойт Grafana CVE-2018-15727 Установка root@kitploit: $ go get github.com/u238/grafana-CVE-2018-15727 Использование root@kitploit: $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: fo...

linux-4.1.15_CVE-2022-42703

Linux kernel release 4.x http://kernel.org/ Это примечания к выпуску для Linux версии 4. Внимательно их прочитайте, так как они рассказывают, что это такое, объясняют, как установить ядро, и что делать, если что-то пошло не так. ЧТО ТАКОЕ LINUX? Linux — это клон операционной системы Unix,...

CVE-2017-7504-poc

JBoss 4.x JBossMQ JMS уязвимость десериализации PoC -h для просмотра использования...

Redis-RCE

redis-rce Redis 4.x/5.x RCE Использование root@kitploit: usage: redis-rce.py -h -r RHOST -p RPORT -L LHOST -P LPORT -f FILE -a AUTH -v Redis 4.x/5.x RCE with RedisModules optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST target host -p RPORT, --rport RPORT...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Затронутые версии VMware View Planner Harness 4.X По аналогии с CVE-2021-21978, данная уязвимость позволяет загрузить произвольный файл без авторизации и добиться удаленного выполнения кода путем модификации встроенного Python-скрипта. Стоит отметить, что...

CVE-2026-61514 Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456 without credentials. Attackers can exploit the unvalidated Session field i...

Joomla! Extension 'iCagenda' 3.2.1 < 3.9.15 / 4.x < 4.0.8 Arbitrary Files Upload

The version of the iCagenda extension for the Joomla! application running on the remote host is 3.2.1 prior to 3.9.15 or 4.x prior to 4.0.8. It is, therefore, affected by an arbitrary files upload vulnerability in the file attachment feature, ultimately resulting in PHP code upload and execution...

EUVD-2026-41864

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: from 4.8.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.18.3, 4.21.0, which fixes the issue...

ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider

Summary An authentication bypass vulnerability was discovered in ZITADEL's external JWT Identity Provider IdP implementation. When validating JSON Web Tokens JWTs from an external provider, ZITADEL properly checks the token's cryptographic signature and issuer iss, but it fails to validate the...

CVE-2023-46453

Certain GL.iNet devices with 4.x firmware allow authentication bypass resulting in administrative control of the device via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S...

PT-2026-39640

In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. The broker enforces publish restrictions but does not enforce equivalent subscribe authorization a...

CVE-2026-6530

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

CVE-2026-41130 Craft CMS has a host header injection leading to SSRF via resource-js endpoint

Craft CMS is a content management system CMS. In versions on the 4.x branch through 4.17.8 and the 5.x branch through 5.9.14, the resource-js endpoint in Craft CMS allows unauthenticated requests to proxy remote JavaScript resources. When trustedHosts is not explicitly restricted default...

CVE-2026-34874

An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attacker to write to address 0...

Craft CMS 安全漏洞

Craft CMS is an open-source content management system developed by Craft CMS. Vulnerabilities existed in versions 4.0.0-RC1 to 4.17.5, as well as in versions 5.0.0-RC1 to 5.9.11 of Craft CMS. These vulnerabilities were caused by behavior injection remote code execution vulnerabilities in the...

CVE-2026-25498 Craft has a potential authenticated Remote Code Execution via malicious attached Behavior

Craft is a platform for creating digital experiences. In versions 4.0.0-RC1 through 4.16.17 and 5.0.0-RC1 through 5.8.21, a Remote Code Execution RCE vulnerability exists in Craft CMS where the assembleLayoutFromPost function in src/services/Fields.php fails to sanitize user-supplied configuratio...