CVE-2025-28062

CVE-2025-28062 — CSRF-Schwachstelle zur Kontenübernahme in ERPNext 14.82.1 , 14.74.3 📌 Zusammenfassung Eine Cross-Site Request Forgery CSRF -Schwachstelle wurde in ERPNext 14.82.1 und 14.74.3 entdeckt, die es Angreifern ermöglicht, unbefugte Aktionen auszuführen, wie z. B.: Benutzerenumeration...

CVE-2024-27956

Exploit de Injeção SQL no Plugin WP Automatic CVE-2024-27956 Um exploit de prova de conceito para a vulnerabilidade de injeção SQL no plugin WP Automatic CVE-2024-27956 que afeta sites WordPress. 📌 Descrição Este exploit tem como alvo uma vulnerabilidade crítica de injeção SQL não autenticada no...

CVE-2023-0157

CVE ID : CVE-2023-0157 Schwachstellentyp : Directory Traversal Beschreibung : Das All-In-One Security AIOS-Plugin für WordPress ist in Versionen bis einschließlich 5.1.4 anfällig für Directory Traversal. Dies ermöglicht authentifizierten Angreifern mit Administratorrechten, den Inhalt beliebiger...

CVE-2024-0012

Palo Alto PAN-OS CVE-2024-0012 Schwachstellenprüfer Dieses Python-Skript prüft das Vorhandensein einer kritischen Authentifizierungs-Bypass-Schwachstelle in der Palo Alto Networks PAN-OS Management-Weboberfläche, die als CVE-2024-0012 identifiziert wurde. Die Schwachstelle ermöglicht es einem nic...

CVE-2023-30765

CVE-2023-30765 CVE-2023-30765 / ZDI-23-905 - Delta Electronics Infrasuite Device Master Privilegieneskalation Bug-Credit: Piotr Bazydlo @chudypb Links: https://www.zerodayinitiative.com/advisories/ZDI-23-905/ https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-01 Verwendung root@kitploit:...

CVE-2023-22515

CVE-2023-22515 CVE-2023-22515 Confluence - Exploit di Controllo di Accesso Non Autorizzato Descrizione della Vulnerabilità Confluence aggiunge utenti amministratore senza autorizzazione USO Compilazione root@kitploit: 源码编译 go mod init CVE-2023-22515 go mod tidy go build -ldflags="-s -w" -trimpath...

cve-2023-42820

cve-2023-42820 JumpServer Versioni interessate v2.24 - v3.6.4 Impatto Se si conosce l'email associata all'account utente della console di amministrazione di JumpServer per impostazione predefinita: admin/[email protected] è possibile reimpostare la password dell'utente amministratore della...

CVE-2021-22911-rust

CVE-2021-22911 Ein Rust Proof-of-Concept für diese CVE. Wird als Teil von https://tryhackme.com/room/rocket verwendet, einem CTF Boot-to-Root auf der TryHackMe-Lernplattform. Um es zu verwenden, aktualisiere die Konstanten in main.rs und führe es aus, und es sollte sofort funktionieren. Erfordert...

CVE-2026-78237

Admin By Request (ABR) for macOS is affected by an insufficient input validation flaw (CVE-2026-78237, CVSS 7.8 HIGH ). A low-privileged local user can inject malicious entries into the sudoers file during an ABR session, granting persistent root access that remains effective even after the eleva...

CVE-2026-78237 Insufficient input validation in Admin By Request (ABR)

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...

CVE-2026-78237 Insufficient input validation in Admin By Request (ABR)

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...

CVE-2026-78236 Insecure PIN derivation mechanism in Admin By Request (ABR)

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...

CVE-2026-78236 Insecure PIN derivation mechanism in Admin By Request (ABR)

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication XPC while masquerading as an Apple-signed process...

CVE-2026-78236

CVE-2026-78236 affects Admin By Request (ABR) , a macOS privilege-escalation utility. The root cause is an insecure PIN derivation mechanism that allows a low-privileged user to escalate to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed...

mikrot8over

mikrot8over mikrot8over: strumento di sfruttamento rapido per Mikrotik RouterOS fino alla versione 6.38.4 Descrizione Questa è una rielaborazione dell'originale Mikrotik Exploit. Sono state aggiunte la compatibilità con Python 2 e funzionalità di scansione multithreading. Versione Python L'utilit...

WordPress RegistrationMagic plugin < 6.0.9.4 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin RegistrationMagic versions 6.0.9.4...

EUVD-2026-66290

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

EUVD-2026-66276

The BlogVault Backup & Staging WordPress plugin before 6.65, MalCare WordPress Security Plugin WordPress plugin before 6.65, The WP Remote WordPress Plugin WordPress plugin before 6.65 do not prevent unauthenticated users from obtaining data derived from the secret that binds a site to its remote...

CVE-2026-80214

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-80198

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...