cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM Hash Disclosure Spoofing Vulnerability Overview CVE-2024-43451 is an NTLMv2 hash disclosure spoofing vulnerability in Windows. It allows an unauthenticated remote attacker to leak a victim's NTLM hash by convincing them to interact with a malicious .url shortcut file...

Symfony-CVE-Scanner-PoC-

Symfony Vulnerability Scanner Automated scanning tool to detect multiple known vulnerabilities CVE in Symfony applications exposed to the Internet. Developed by m10sec. Features 🔍 Detection of multiple vulnerabilities in Symfony : Validation of Symfony vulnerabilities ✅ Real exploitation validati...

Cisco_CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 Checkscript based on: Technical analysis: https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ First script version: https://github.com/Atea-Redteam/CVE-2023-20198/ Thanks to Atea Redteam for their work. Requires: Python3.7+ Python libs:...

CVE-2026-50522

🛡️ CVE-2026-50522 — Microsoft SharePoint RCE Investigation Critical SharePoint Deserialization Vulnerability Under Active Exploitation Created by Pratik Chhetri Report Date: 2026-07-27 📌 Executive Snapshot...

CVE-2023-38831-Exploit

CVE-2023-38831 WinRAR Exploit Generator Created by: technicalcorp This project contains a Python script that exploits CVE-2023-38831 , a vulnerability in WinRAR versions prior to 6.23. The exploit generates a malicious RAR archive that triggers the execution of arbitrary code when the victim open...

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation. The software development company said PaperCut NG/MF versions 26.0.5, 25.0.13 and...

CVE-2021-43798

CVE-2021-43798: Grafana Arbitrary File Read Vulnerability Added nuclei template for full-version detection on Windows+Linux List of 52 plugins: root@kitploit: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap canvas grafana welcome xychart...

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the patches by September 12, 2026. The...

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco's Secure Firewall Management Center FMC Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco's Secure FMC Software, which allows an unauthenticated, remote attack...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

Flaws in Adobe Commerce and Magento

Adobe has identified a vulnerability in Adobe Commerce and Magento. The vulnerability lies in the template engine of Adobe Commerce, where certain special elements are not properly neutralized. As a result, an attacker can execute arbitrary code remotely, without requiring user interaction. This...

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked. A small detail, but an annoying one if that was a precaution you were counting on. Elsewhere, a trusted software...

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1 CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain...

Vulnerabilities found in PaperCut MF and PaperCut NG of PaperCut

PaperCut has vulnerabilities in PaperCut MF and PaperCut NG. An unauthorized malicious actor could potentially exploit these vulnerabilities to gain control over the PaperCut environment and execute arbitrary code. To do this, the malicious actor would need to send malicious network traffic to th...

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the...

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions

PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to address the issue. It said it's "aware of...

PT-2026-83118

Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified PaperCut NG affected versions not specified Description An unsafe dynamic class loading issue exists in the database connection utilities. The application instantiates database driver classes based o...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Linux Distros Unpatched Vulnerability : CVE-2026-77647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect...

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231 , is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. "SAP...