PT-2026-102510

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in protectio...

CVE-2026-97687: Improper Certificate Validation

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

PT-2026-102523

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Initialization of a Resource with an Insecure Default exists, which allows a high privileged attacker with remote access to potentially achieve elevatio...

PT-2026-102525

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to elevate their privileges. Recommendations...

PT-2026-102511

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An unauthenticated attacker with remote access can exploit a Download of Code Without Integrity Check issue. This flaw allows the system to download code without...

PT-2026-102725

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ext authz filter assumes that a request contains a :path pseudoheader when applying query parameters to set or query parameters to remove from an...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-клик WP Staging & Migration = 0.1.0.38 - Отсутствие авторизации для неаутентифицированной настройки API/Обновление произвольных опций/Создание административного пользователя...

CVE-2023-43208

CVE-2023-43208 Mirth Connect: PoC RCE PoC-скрипт на Python, нацеленный на CVE-2023-43208 в Mirth Connect. Disclaimer Используйте только в средах, которыми вы владеете или для тестирования которых у вас есть явное разрешение. Этот репозиторий предназначен для исследований в области безопасности,...

CVE-2023-43208

CVE-2023-43208 — RCE sans authentification préalable sur Mirth Connect Exécution de code à distance sans authentification préalable dans NextGen Healthcare Mirth Connect CVSS 9.8 Critique — Contournement du correctif de CVE-2023-37679 Aperçu Mirth Connect utilise la bibliothèque Java XStream pour...

CVE-2023-25194

CVE-2023-25194 https://hackerone.com/reports/1529790 PoC POST /connectors HTTP/1.1 Host: xxxx:8083 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.0.0 Safari/537.36 Accept:...

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator Ограниченный проверочный валидатор для CVE-2026-23744 , затрагивающий уязвимые развертывания MCPJam Inspector. Этот проект является независимым, неразрушающим инструментом проверки для ранее раскрытого CVE-2026-23744. Он не является первоначальным...

CVE-2026-98162

A flaw was found in the Linux kernel's Server Message Block SMB file server ksmbd. A remote attacker could cause a Denial of Service DoS by sending tree connect requests that encounter an error during response processing. Because the server fails to properly clean up and release connection...

GO-2026-6480 Mattermost doesn't enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler in github.com/mattermost/mattermost-server

Mattermost doesn't enforce administrator authorization on the setDefaultInstance call within the /gitlab connect command handler in github.com/mattermost/mattermost-server...

GO-2026-6483 Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret in github.com/mattermost/mattermost-server

Mattermost doesn't authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret in github.com/mattermost/mattermost-server...

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell aide usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help affiche ce message d'aide et quitte --proxy PROXY adresse du proxy HTTP, ex. http://127.0.0.1:8888 --utf16 activer le coda...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorisation manquante pour la mise à jour arbitraire des options Abonné+ Description: Le plugin InstaWP Connect – 1-click WP Staging & Migration pour WordPress est vulnérable à une modification non autorisée des données en raison d'un contrôle de capaci...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways: переполнение буфера в стеке и удалённое выполнение кода RCE CVSS 9.0 — КРИТИЧЕСКИЙ | Активно эксплуатируемый 0-day | Обнаружена в январе 2025 года Обзор CVE-2025-0282 — это уязвимость переполнения буфера в стеке CWE-121 / CWE-7...

curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

A flaw was found in curl. This vulnerability allows curl to wrongly reuse an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different authentication credentials for the HTTP proxy. This improper connection reuse could lead to an attacker...

CVE-2025-0282

CVE-2025-0282용 PoC Ivanti Connect Secure, Ivanti Policy Secure 및 ZTA 게이트웨이용 Ivanti Neurons에 영향을 주는 원격 비인증 스택 기반 버퍼 오버플로 개요 이것은 CVE-2025-0282의 악용을 시연하기 위한 개념 증명 익스플로잇이며, watchTowr가 공개한 악용 전략을 기반으로 합니다. 이 PoC는 Ivanti Connect Secure 22.7r2.4를 대상으로 구축된 ROP 체인을 포함합니다. 해당 대상 버전에 맞는 ROP 체인을 먼저 구축하지 않으면 ...

ripple20-digi-connect-exploit

Exploit Ripple20: Digi Connect ME 9210 Auteurs: Moshe Kol, Shlomi Oberman Ce dépôt contient un exploit PoC pour CVE-2020-11896, une vulnérabilité critique de débordement de tampon basé sur le tas dans la pile TCP/IP de Track faisant partie de la suite de vulnérabilités Ripple20. L'exploit parvien...