cpanelCVE-2026-41940

🔴 cPanelCVE CVE-2026-41940 — Bypass dell'autenticazione in cPanel & WHM CVSS 10.0 Critico · Confermato In‑The‑Wild · Login Root Automatico 📖 Panoramica cPanelCVE è un exploit proof‑of‑concept per CVE-2026-41940, una vulnerabilità critica di iniezione CRLF nel file di sessione di cPanel & WHM che...

CVE-2026-77991

Joomla Event Manager (a Joomla extension from joomlaeventmanager.net) versions prior to 5.0.1 are vulnerable to privileged remote code execution due to a flaw in the administrator source model , which allows writing dangerous file types including PHP. An authenticated attacker with high privilege...

EUVD-2026-66866

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2026-77991 Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2025-26263

CVE-2025-26263 CVE-2025-26263 – Die Windows-Desktop-Anwendung GeoVision ASManager mit der Version 6.1.2.0 oder niedriger ist anfällig für die Offenlegung von Anmeldeinformationen aufgrund unsachgemäßer Speicherverwaltung im Prozess ASManagerService.exe. Anforderungen Für einen erfolgreichen Angri...

EUVD-2026-66864

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990

Joomla Event Manager (a Joomla extension) before 5.0.1 contains an access control flaw in its attendee list feature. Any logged-in user who is not the event manager can read attendee names, usernames, registration dates, and statuses for events they do not manage, including those belonging to unp...

CVE-2025-63579

CVE-2025-63579 وصول غير مصرح به إلى جميع أسماء المستخدمين وكلمات المرور المُدخلة في ميزة دفتر العناوين الموجودة في طابعات Kyocera Command Center RX. الوصف الاستخدام غير المصرح به لطابعات Kyocera، يسمح بتصدير جميع المعلومات المخزنة في دفتر عناوين Kyocera. يمكن تجاوز الإجراء الأمني الذي يشفر البيان...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-33229

CVE-2026-33229 — RCE no XWiki via Bypass do Sandbox do Apache Velocity Uma vulnerabilidade de Execução Remota de Código na Plataforma XWiki que permite a um usuário autenticado com permissões de script contornar completamente o sandbox do Apache Velocity — sem necessidade de Reflection em Java —...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performe...

CVE-2021-43798_exploit

CVE-2021-43798exploit Grafana ist eine Open-Source-Plattform für Monitoring und Observability. Die Grafana-Versionen 8.0.0-beta1 bis 8.3.0 mit Ausnahme der gepatchten Versionen sind anfällig für Directory Traversal, wodurch der Zugriff auf lokale Dateien ermöglicht wird. Der anfällige URL-Pfad...

CVE-2025-49844

🚨 CVE-2025-49844 RediShell - Guida Completa ⚠️ Solo per Imparare, Non per Hackerare ; ⚠️ Ehi! Questo è un semplice strumento che ho creato per aiutare le persone a verificare se i loro server Redis sono vulnerabili a questo bug. Non è pensato per attacchi reali - solo per imparare e proteggere le...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: SOLO A FINI EDUCATIVI ⚠️ Questo repository contiene un Proof-of-Concept PoC per la CVE-2026-24061. È destinato esclusivamente a scopi educativi e per testare sistemi in un ambiente di laboratorio controllato. L'autore non si assume alcuna...

CVE-2024-41713-Scan

Scanner CVE-2024-41713 Questo repository contiene uno script Python per rilevare la presenza della vulnerabilità CVE-2024-41713 in Apache HTTP Server. CVE-2024-41713 è una vulnerabilità di directory traversal che consente ad attaccanti non autorizzati di accedere a risorse limitate su server...

CVE-2021-4034

CVE-2021-4034 Exploit per l'escalation dei privilegi di polkit Basta eseguire make, ./cve-2021-4034 e godersi la propria shell di root. PoC Se l'exploit funziona, otterrai immediatamente una shell di root: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o...