CVE-2022-22965

Spring Boot CVE-2022-22965 针对 Spring Boot 2.6.5 版本的 CVE-2022-22965 Docker PoC 🚀 开始使用 1. 从 https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip 下载发行版代码并解压。 2. 运行 docker compose up --build 构建并启动易受攻击的应用程序。 3. 运行 curl -H "Accept: text/html;"...

CVE-2024-52301-Research

CVE-2024-52301-Research 关于 CVE-2024-52301 的一些研究。我看到了这个漏洞，想弄清楚 Laravel 为何容易受到攻击。为此，我对比了 6.20.44 和 6.20.45 版本，并追踪了 GET 参数如何最终改变应用程序配置。 我已在 X 和 BlueSky 上写过相关内容： https://x.com/0xntrm/status/1857504510609965206 https://bsky.app/profile/ntrm.bsky.social/post/3laz4tkds2k2m 目录 该仓库包含一个简单的 docker compose...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 盲注 RCE 漏洞利用（CVE-2026-25643）PoC 📜 描述 此 Python 漏洞利用针对 Frigate NVR 0.16.3 及更早版本中的一个严重配置操纵漏洞（涵盖已认证和未认证两条路径）。通过注入恶意的 go2rtc 流和一个伪造的摄像头条目，它可在服务重启时以 Frigate 进程身份触发任意命令执行——无需反向 Shell 或输出捕获。 🛠️ 安装 !NOTE 为确保项目依赖拥有干净且隔离的环境，建议使用 Python 的 venv 模块。 OSX/Linux root@kitploit: git clone...

CVE-2026-85983

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the...

CVE-2026-85983

CVE-2026-85983 is a local privilege escalation in the Auth0 AD/LDAP Connector . The connector improperly processes a configuration value during service startup, allowing a low-privileged user on the host to modify the connector's configuration. Upon service restart, the altered configuration can ...

CVE-2026-84647

A flaw was found in Stapler, a web framework included in Jenkins. This vulnerability allows an attacker with 'Overall/Read' permission to instantiate objects related to configuration through form data binding. The system does not properly restrict the types of objects that can be created, enablin...

CVE-2026-84647

CVE-2026-84647 affects Stapler (the web framework used by Jenkins) in versions up to 2107.v8dfcb_e8ed317 (except 2088.2093.vd7c3e58008a_6), shipped in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier . The root cause is that Stapler's form data binding does not restrict the object types that ca...

CVE-2026-82078 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG. The application instantiates database driver classes based on configurable driver names without validating against an allowlist of approved drivers. If an attacker can...

CVE-2026-67578

FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...

CVE-2026-67578

The Furuno FA-50 (all versions) has a missing authentication flaw affecting certain configuration parameters. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter configuration without authentication. The CVSS 3.1 score is 7.5 (HIGH) with ...

EUVD-2026-65318

FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...

CVE-2026-16857

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication...

CVE-2026-14549

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to add or delete the site's configured languages...

CVE-2026-0864

A flaw was found in the Python configparser module. When writing configuration files, an attacker who controls the input value can inject unexpected keys and values. This occurs if the input contains multi-line text with carriage return characters, leading to potential configuration manipulation...

CVE-2026-50633

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor ra.xml or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or...

CVE-2026-49203 Unauthenticated eSIM Configuration Manipulation

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted...

CVE-2026-23819 Error in SSID Processing allows Stored XSS in Web Management Interface

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to...

PT-2026-40336

Name of the Vulnerable Software and Affected Versions Access Points running AOS-10 affected versions not specified Access Points running AOS-8 Instant affected versions not specified Description A flaw in the web-based management interface allows an unauthenticated remote attacker on the same loc...

CVE-2026-3315

Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33...

EUVD-2026-10486

Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33...