185664 matches found
CVE-2022-1329
WP Elementor 3.6.0/1/2 Удаленное выполнение кода Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version:...
CVE-2025-24076
CVE-2025-24076 Эксплойт уязвимости повышения привилегий службы Microsoft Windows Cross Device Service Обзор Этот скрипт эксплуатирует уязвимость в Windows Cross Device Service , которая позволяет повышать привилегии в системах Windows 11 , Windows Server 2025 и Windows Server 2022 23H2 установка...
Adobe ColdFusion - Access Control Bypass
There is an access control bypass vulnerability in Adobe ColdFusion versions 2023 Update 2 and below, 2021 Update 8 and below and 2018 update 18 and below, which allows a remote attacker to bypass the ColdFusion mechanisms that restrict unauthenticated external access to ColdFusion's Administrato...
wordpress-jetpack-broken-access-control-vulnerable-application
wordpress-jetpack-broken-access-control-vulnerable-application Это уязвимое приложение для тестирования эксплуатации уязвимости нарушенного контроля доступа Jetpack 13.9.1 CVE-2024-9926. ПРЕДУПРЕЖДЕНИЕ! Это приложение содержит серьезные уязвимости безопасности. Запускайте его на свой страх и риск...
wordpress-jetpack-broken-access-control-exploit
wordpress-jetpack-exploit-de-contrôle-d-accès-brisé Il s'agit d'un programme Python3 qui exploite la vulnérabilité de contrôle d'accès brisé dans Jetpack 13.9.1 CVE-2024-9926. AVERTISSEMENT Cet outil est destiné aux ingénieurs en sécurité et aux personnes chargées de la sécurité des applications...
CVE-2025-45422---Bbox
CVE-2025-45422 : Persistance UPnP et contournement du contrôle d'accès sur Proximus b-box https://vulners.com/cve/CVE-2025-45422 Ce script démontre la CVE-2025-45422 affectant les routeurs Proximus b-box exécutant la version de firmware 8c.725A. Il exploite la fonctionnalité UPnP du routeur pour...
DEBIAN-CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
DEBIAN-CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-48907
🚨 CVE-2026-48907 - JCE Joomla Content Editor Exécution de code à distance non authentifiée ⚠️ RCE non authentifiée critique dans JCE Joomla Content Editor Une vulnérabilité critique de contrôle d'accès permettant à des attaquants non authentifiés de compromettre des installations Joomla vulnérable...
EUVD-2026-92894
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A vulnerability exists in SSSD where improper configuration allows an access control bypass in LDAP environments. If the system is configured to evaluate password expiration warnings before restrictive access rules, an expired-password warning causes the rule evaluation to terminate early, treati...
CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033 Sssd: sssd: access control bypass via improper ldap shadow expiration check
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
EUVD-2026-92890
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033 Sssd: sssd: access control bypass via improper ldap shadow expiration check
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...