263471 matches found
CVE-2025-33073
CVE-2025-33073 — Riflessione NTLM EoP del Client SMB di Windows Analisi di ricerca di Sentinel AI Defense. Solo analisi difensiva — nessun exploit funzionante o PoC viene pubblicato qui. Un difetto di controllo degli accessi improprio nel client SMB di Windows che ripristina tecniche di riflessio...
EUVD-2026-93415
Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...
CVE-2026-82924 PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail
Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Expert Mail: through 2026-09-18...
CVE-2026-48907
CVE-2026-48907 CVE-2026-48907 è una vulnerabilità critica di controllo degli accessi improprio nell'estensione dell'editor JCE per Joomla. Consente ad attaccanti non autenticati di creare nuovi profili dell'editor, il che può in ultima analisi portare al caricamento arbitrario di file PHP e...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
Exploit for Missing Authentication for Critical Function in Gfi Kerio_Control
!WARNING DISCLAIMER This proof-of-concept is provide...
CVE-2021-34824
Repro di CVE-2021-34824 riproduzione di un vecchio bug di Istio Questa serie di script e manifest aiuta a esplorare un vecchio problema di sicurezza di Istio che consentiva a utenti Istio malintenzionati di accedere a segreti Kubernetes a cui non avrebbero dovuto avere accesso. Questa riproduzion...
Null Byte Injection
Netty is vulnerable to null byte injection. The vulnerability is due to the MqttEncoder not validating client identifiers, topics, usernames, and PUBLISH topic names before encoding, where prohibited null bytes can be inserted into MQTT UTF-8 string fields and attackers can exploit this by...
CVE-2026-105985
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...
CVE-2026-20127
🛡️ CVE-2026-20127 — Umgehung der Authentifizierung bei Cisco Catalyst SD-WAN 📌 Übersicht CVE-2026-20127 ist eine kritische Schwachstelle zur Umgehung der Authentifizierung, die Cisco Catalyst SD-WAN-Komponenten betrifft, einschließlich Controller und Managementsysteme. Ein entfernter, nicht...
CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...
CVE-2026-105985
Craft CMS 5.10.13.2 is vulnerable to authenticated remote code execution (RCE) within the Control Panel's app/render-components action. An authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides to manipulate an EntryType object's ...
CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...
CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...
EUVD-2026-93362
Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...
http2-bomb-detector
http2-bomb-detector Strumento di rilevamento non distruttivo della vulnerabilità HTTP/2 Bomb CVE-2026-49975 — per Nginx / Apache httpd Contesto della vulnerabilità CVE-2026-49975 è una vulnerabilità diffusa di denial of service remoto a livello di protocollo HTTP/2, scoperta dal ricercatore di...
thm-cybersec-portfolio
Appunti TryHackMe — Portfolio di Cybersecurity Appunti personali e riassunti delle room TryHackMe completate. Creato come riferimento di studio e portfolio per ruoli di sicurezza IT. Room Completate | Room| Argomento ---|---|--- 01| Linux Privilege Escalation| Tecniche di privesc su Linux 02| Sud...
Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)
Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.4 Vulnerability Details CVEID:CVE-2026-62574 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Ja...