80535 matches found
DEBIAN-CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
DEBIAN-CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...
DEBIAN-CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...
DEBIAN-CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...
DEBIAN-CVE-2026-82466
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthnlogin route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account identifiers instead of validating the...
CVE-2026-9082-Mass_Scanner
CVE-2026-9082-MassScanner Mass Scanner per l'Exploit Drupal CVE-2026-9082 Per configurare lo script ExploitPOC esegui questo comando : root@kitploit: pip install requirements.txt Per utilizzare lo script ExploitPOC esegui questo comando : root@kitploit: python exploitpoc.py -t targets.txt -o...
CVE-2026-1814
Questo repository non contiene un README...
CVE-2026-63030
Dieses Repository hat keine README-Datei...
dasel-hardened-container
dasel v3.3.1 container indurito Questo è un pacchetto melange e una immagine container apko per dasel v3.3.1 con una patch in fase di build per CVE-2026-33320 espansione illimitata degli alias YAML. L'immagine è costruita interamente da un APK prodotto localmente - non viene utilizzata alcuna...
nginx-rift-scanner
nginx-rift-scanner Abhängigkeitsfreier Python 3 Scanner für CVE-2026-42945 "NGINX Rift" — ein CVSS v4.0 9.2 KRITISCHER heap-basierter Pufferüberlauf CWE-122 in ngxhttprewritemodule. Was er erkennt Bei jedem Aufruf werden zwei unabhängige Prüfungen durchgeführt:...
CVE-2026-55854
creationtimestamp| type| source ---|---|--- 2026-08-29 16:31:36+00:00| seen| https://gist.github.com/alon710/5f232ba94d0a0fcc67abaad39f7d78cc...
Fragnesia
Privilege escalation locale CVE-2026-46300 Modalità d'uso: CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia Versioni interessate: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS...
CVE-2026-77586
creationtimestamp| type| source ---|---|--- 2026-08-29 16:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muaarttz5a2b...
CVE-2026-81849
creationtimestamp| type| source ---|---|--- 2026-08-29 16:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muaarmw6s222...
copy-fail-CVE-2026-31431
Questo repository non contiene un README...
PaperCut-CVE-2026-81578-82078
Professionelles Sicherheitsforschungstool für die Bewertung von PaperCut NG/MF-Schwachstellen und autorisierte Ausnutzung root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡...
YellowKey-BitLocker-CVE-2026-45585
इस रिपॉजिटरी में README नहीं है।...
DEBIAN-CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-3102
⚠️ Ricerca sulla Sicurezza e Disposizioni Legali 📌 Scopo di Questo Repository Questo repository è fornito esclusivamente per scopi educativi, accademici e di ricerca autorizzata sulla sicurezza informatica. È inteso a supportare la comprensione di: Vulnerabilità di sicurezza e concetti di...