CVE-2026-66916

Обход защиты паролем категории через JSON-формат в JoomGallery JoomGallery ≤ 4.3.0-stable — неаутентифицированный злоумышленник обходит парольный шлюз и скачивает защищённые изображения СВОДКА В JSON-представлении категорий JoomGallery существует обход контроля доступа без аутентификации. Когда...

CVE-2026-77915

rConfig Core 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

oracle-oam-authentication-bypas-exploit

Exploit de contournement d'authentification Oracle Access Manager OAM Introduction Exploitation de la vulnérabilité d'oracle de padding d'Oracle Access Manager OAM CVE-2018-2879 pour effectuer un contournement d'authentification et se connecter à toute application web protégée par OAM en utilisan...

exposecheck

EXPOSECHECK N'exécutez que sur des serveurs que vous possédez ou que vous êtes autorisé à tester. Portée : un résultat positif signifie uniquement que cette vérification étroite a trouvé un défi d'authentification et une version de Langflow égale ou supérieure au seuil corrigé pour CVE-2025-3248...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Rapport d'exercice de détection en laboratoire Classification : Laboratoire interne - CyberLAB Date : 24 mai 2026 Plateforme : Elastic Stack v9.4.1 Statut : Détection confirmée Table des matières A - Résumé exécutif B - Rapport d'analyse complet 1. Objectif et modèle de...

CVE-2026-13213

Zephyr RTOS Bluetooth Hearing Access Service (HAS) GATT server (subsys/bluetooth/audio/has.c) contains a NULL-pointer dereference in security_changed(). The connection-callback set is installed unconditionally via BT_CONN_CB_DEFINE, so the callback fires before the application calls bt_has_regist...

EUVD-2026-65003

The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...

CVE-2025-59843-CVE-2025-59932

CVE-2025-59843 & CVE-2025-59932 1. Exposition publique des adresses e-mail des utilisateurs CVE-2025-59843 Dans le périmètre / Application concernée : FlagForge Web Application Point d'accès API : /api/user/username Détails : Le point d'accès renvoie les adresses e-mail des utilisateurs sans...

EUVD-2026-65001

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mailmailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

EUVD-2026-65000

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diaglogmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

EUVD-2026-64999

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

EUVD-2026-64996

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poescheduleprofile function. The vulnerability is caused by repeated concatenation of the startdate, starttime, durationtime, howoften, weekdays, monthlydate, and cycleduration fields into small fixed-size buffers...

CVE-2026-71932 DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function, caused by insufficient validation of the option field. A remote attacker with valid administrative credentials for the device's web management interface can supply crafted input containi...

CVE-2026-71930 DrayTek VigorSwitch Multiple Models OS Command Injection via setTime

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71912

Multiple DrayTek VigorAP models are affected by a buffer overflow in the apautotest function, caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid administrative credentials on the device's web management interface can trigger the fl...

CVE-2026-71909 DrayTek VigorAP Multiple Models OS Command Injection via InquierTime

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands...

CVE-2025-32463-PoC

CVE-2025-32463 – Повышение привилегий через sudo chroot 📝 Обзор CVE-2025-32463 — это локальная уязвимость повышения привилегий, затрагивающая утилиту sudo. Она позволяет обычному пользователю повысить привилегии до root, эксплуатируя опцию -R которая задаёт пользовательский корневой каталог време...

CVE-2025-64516-POC

CVE-2025-64516 문서에 대한 무단 접근 PoC. CVE-2025-64516 영향 인증되지 않은 사용자가 모든 항목티켓, 자산 등에 첨부된 GLPI 문서에 접근할 수 있습니다. 영향을 받는 버전 버전 = 10.0.0, = 11.0.0 패치 10.0.21로 업그레이드 11.0.3으로 업그레이드 사용법 root@kitploit: git clone https://github.com/ArdNoir/CVE-2025-64516.git cd CVE-2025-64516 python exploit.py -h...