CVE-2025-26263

CVE-2025-26263 CVE-2025-26263 – Die Windows-Desktop-Anwendung GeoVision ASManager mit der Version 6.1.2.0 oder niedriger ist anfällig für die Offenlegung von Anmeldeinformationen aufgrund unsachgemäßer Speicherverwaltung im Prozess ASManagerService.exe. Anforderungen Für einen erfolgreichen Angri...

EUVD-2026-66864

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990

Joomla Event Manager (a Joomla extension) before 5.0.1 contains an access control flaw in its attendee list feature. Any logged-in user who is not the event manager can read attendee names, usernames, registration dates, and statuses for events they do not manage, including those belonging to unp...

CVE-2025-63579

CVE-2025-63579 وصول غير مصرح به إلى جميع أسماء المستخدمين وكلمات المرور المُدخلة في ميزة دفتر العناوين الموجودة في طابعات Kyocera Command Center RX. الوصف الاستخدام غير المصرح به لطابعات Kyocera، يسمح بتصدير جميع المعلومات المخزنة في دفتر عناوين Kyocera. يمكن تجاوز الإجراء الأمني الذي يشفر البيان...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-33229

CVE-2026-33229 — RCE no XWiki via Bypass do Sandbox do Apache Velocity Uma vulnerabilidade de Execução Remota de Código na Plataforma XWiki que permite a um usuário autenticado com permissões de script contornar completamente o sandbox do Apache Velocity — sem necessidade de Reflection em Java —...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performe...

CVE-2021-43798_exploit

CVE-2021-43798exploit Grafana ist eine Open-Source-Plattform für Monitoring und Observability. Die Grafana-Versionen 8.0.0-beta1 bis 8.3.0 mit Ausnahme der gepatchten Versionen sind anfällig für Directory Traversal, wodurch der Zugriff auf lokale Dateien ermöglicht wird. Der anfällige URL-Pfad...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Guida Completa ⚠️ Solo per Imparare, Non per Hackerare ; ⚠️ Ehi! Questo è un semplice strumento che ho creato per aiutare le persone a verificare se i loro server Redis sono vulnerabili a questo bug. Non è pensato per attacchi reali - solo per imparare e proteggere le...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: SOLO A FINI EDUCATIVI ⚠️ Questo repository contiene un Proof-of-Concept PoC per la CVE-2026-24061. È destinato esclusivamente a scopi educativi e per testare sistemi in un ambiente di laboratorio controllato. L'autore non si assume alcuna...

CVE-2024-41713-Scan

Scanner CVE-2024-41713 Questo repository contiene uno script Python per rilevare la presenza della vulnerabilità CVE-2024-41713 in Apache HTTP Server. CVE-2024-41713 è una vulnerabilità di directory traversal che consente ad attaccanti non autorizzati di accedere a risorse limitate su server...

CVE-2021-4034

CVE-2021-4034 Exploit per l'escalation dei privilegi di polkit Basta eseguire make, ./cve-2021-4034 e godersi la propria shell di root. PoC Se l'exploit funziona, otterrai immediatamente una shell di root: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o...

CVE-2023-1177-MLFlow

CVE-2023-1177 MLFlow Path Traversal Informazioni su MLflow MLflow è una piattaforma open-source per la gestione dell'intero ciclo di vita del machine learning. Funzioni principali: MLflow gestisce quattro funzioni principali: Tracciamento degli esperimenti per registrare e confrontare parametri e...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — Path Traversal nei Template di Report di InvenTree Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Gravità: Media Pubblicato: 2026-03-20 Crediti: @alonaki Descrizione Una vulnerabilità di path traversal nel motore dei template di report consente a un utente con privilegi di sta...

CVE-2021-40346

CVE-2021-40346 हेडर अनुरोध आंतरिक प्रतिनिधित्व पर इंटीजर ओवरफ्लो HTTP रिक्वेस्ट स्मगलिंग की अनुमति देता है। यह रिपॉजिटरी docker-compose का उपयोग करके निर्मित एक PoC प्रस्तुत करता है, जिसमें दो डॉकर इमेज शामिल हैं: एक HaProxy के कमजोर संस्करण इस मामले में 2.2.16 के साथ और एक Flask वेब सर्वर जो WSG...

CVE-2026-26418

CVE-2026-26418 Autenticazione e Autorizzazione Mancanti nella Web API Riepilogo della Vulnerabilità È stata identificata una vulnerabilità di autenticazione e autorizzazione mancanti nel livello Web API di Tata Consultancy Services TCS – Cognix Recon Client v3.0. Alcuni endpoint API esposti non...