CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity prima della versione 2023.05.4 è vulnerabile a un bypass dell'autenticazione che porta a RCE Utilizzo Per ottenere una reverse shell root@kitploit: python3 exploit.py Riferimenti https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem...

cve-2023-34034

cve-2023-34034 Demonstration des CVE-2023-34034 Autorisierungsbypasses in Spring Security. Siehe CVE-2023-34034 Spring Security Autorisierungsbypass auf Don't Panic!...

WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin Mobile App for WooCommerce versions = 0.4.62...

CVE-2018-1207-better

Exploit PoC für CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell Dieses Repository enthält ein Proof-of-Concept-Python-Skript, um einen Exploit für Remotecodeausführung in iDRAC7- und iDRAC8-Geräten mit Firmware-Versionen 2.52.52.52 und darunter zu demonstrieren. Dieser Exploit ermöglicht es...

Stryker

Stryker Strumento proof-of-concept multiuso basato su CPU-Z CVE-2017-15303 Requisiti di sistema x64 Windows 7/8/8.1/10; Stryker progettato solo per x64 Windows; Sono necessari privilegi di amministratore. Caratteristiche Override dell'applicazione della firma dei driver simile a DSEFix; Hijacking...

CVE-2021-31630-OpenPLC_RCE

CVE-2021-31630-OpenPLCRCE Exploit para Execução Remota de Código Autenticada no Servidor Web OpenPLC v3...

CVE-2022-0486

Fidelis Network and Deception - CVE-2022-0486 - Escalation dei privilegi tramite permessi file non sicuri - Multipli Pubblicabilità e ringraziamenti Tutti gli exploit sono stati approvati per la pubblicazione dal Governo degli Stati Uniti. Un ringraziamento speciale ai militari e ai collegamenti...

CVE-2022-24924

Vulnerabilidade de controle de acesso inadequado no LiveWallpaperService CVE-2022-24924 SVE-2021-24089 Versão do Windows testada: Windows 10 20H2 Build 19042.1348 64 bits Versão do Live Wallpaper: 3.0.9.0 ou anterior Existe um LiveWallpaperService que opera por padrão em laptops Samsung, mas foi...

CVE-2020-11651-PoC

CVE-2020-11651-PoC Repository che contiene un exploit CVE-2020-11651 aggiornato per funzionare con le ultime versioni di Python e gestire gli errori relativi alle connessioni. COPIA DEL README DAL REPOSITORY ORIGINALE Repository Originale Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è u...

EUVD-2026-65320

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import...

CVE-2026-19851 Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

A Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to gain access to user accounts created during XML import...

CVE-2026-19851

Tuleap Enterprise Edition versions 17.0 through 17.5 are affected by a Use of Default Password vulnerability. User accounts created during XML import retain default credentials, which could allow an unauthenticated remote attacker to gain access to those accounts. The CNA-assigned CVSS 3.1 score ...

CVE-2026-18512

The TranslatePress WordPress plugin (multilingual/AI translation) is vulnerable to Stored XSS in all versions up to and including 3.2.6 . The root cause is insufficient input sanitization and output escaping of approved comment body content rendered in the Translation Editor Strings Dropdown comp...

EUVD-2026-65317

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and...

CVE-2026-18512 TranslatePress <= 3.2.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Approved Comment Body in Translation Editor

The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and...

CVE-2026-18100

The MetForm plugin for WordPress (Elementor form builder) versions up to and including 4.1.8 are vulnerable to Stored Cross-Site Scripting via the mf_form_id widget setting due to insufficient input sanitization and output escaping. An authenticated attacker with contributor-level access or above...

EUVD-2026-65315

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mfformid' Widget Setting in all versions up to, and including, 4.1.8 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-16601

CM Map Locations for WordPress (all versions ≤ 2.1.8 ) is vulnerable to limited arbitrary file upload via the cmloc_route_image_upload AJAX action. The uploadMedia function performs incomplete extension filtering without MIME-type checks or upload capability verification before calling move_uploa...

CVE-2019-19609

CVE-2019-19609 Strapi = 3.0.0-beta.17.8 execução remota de código autenticada...

CVE-2025-68461

Scanner CVE-2025-68461 Uno strumento di sicurezza in C++ per rilevare vulnerabilità di Cross-Site Scripting XSS nelle installazioni di Roundcube Webmail. Impatto Accesso non autorizzato agli account utente Dirottamento di sessione Esposizione dei dati Azioni non autorizzate per conto degli utenti...