CVE-2021-38647-POC-and-Demo-environment

التفاصيل OMIGod - CVE-2021-38647 البنية التحتية للإدارة المفتوحة OMI، المعروفة سابقًا باسم NanoWBEM هي خادم إدارة مفتوح المصدر لنموذج الواجهة المشتركة CMI من تطوير Microsoft وThe Open Group. OMI هو وكيل برمجي موجود على معظم أجهزة Azure الافتراضية التي تعمل بنظام Linux، ومع ذلك لا يعرف الكثيرون...

CVE-2025-0108-Authentication-Bypass-checker

Cet outil teste si un appareil PAN-OS cible est vulnérable à la vulnérabilité de contournement d'authentification CVE-2025-0108. Il envoie une requête HTTP spécialement conçue à la cible et analyse la réponse pour déterminer si l'appareil est exploitable. Utilisation IP unique root@kitploit: pyth...

RCE_CVE-2024-7954-

RCECVE-2024-7954- Le plugin porteplume utilisé par SPIP avant les versions 4.30-alpha2, 4.2.13 et 4.1.16 est vulnérable à une exécution de code arbitraire. Un attaquant distant non authentifié peut exécuter du PHP arbitraire en tant qu'utilisateur SPIP en envoyant une requête HTTP malveillante...

CVE-2020-5902-Vuln-Checker

Проверка уязвимости CVE-2020-5902 Изучая эту уязвимость вместе с коллегами-исследователями, мы пришли к выводу, что большинство существующих способов проверки данной уязвимости можно отнести к формам компрометации системы. Мы хотели разработать способ проверки уязвимости, который не ставил бы под...

westone-CVE-2020-14883-scanner

westone-CVE-2020-14883-scanner يمكن لمهاجم عن بُعد إنشاء طلب HTTP خاص للسيطرة على وحدة تحكم WebLogic Server دون مصادقة. التثبيت والاستخدام git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git cd westone-CVE-2020-14883-scanner cmd CVE-2020-14883.exe الإصدارات المتأثرة Oracle...

EUVD-2026-51230

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

CVE-2026-20146

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by CVE-2026-20146. The issue stems from improper validation of user-supplied input, enabling a remote, authenticated attacker (with valid administrative credentials) to perform path traversal via a crafted HTTP request and read or dele...

PT-2026-60218

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...

CVE-2026-41721

A flaw was found in Spring Data Commons. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request when Spring Data Web Support is enabled with a Controller method using @ProjectedPayload. This can cause the application to allocate excessive memory, leading to a...

PT-2026-54702

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center affected versions not specified Description Insufficient validation of user-supplied input allows an unauthenticated, remote attacker to read arbitrary files from a restricted container. This is achieved by sending a...

CVE-2026-36821

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36796

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36792

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formWifiRadioSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36817

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36819

The CVE covers Shenzhen Tenda Technology Co., Ltd Tenda W20E devices (v15.11.0.6). A buffer overflow in the bindMACAddr parameter of the fromSetDhcpRules function is reported, enabling a DoS through a crafted HTTP request. Affected component: W20E firmware; underlying issue: improper input handli...

CVE-2026-36822

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the macAddr parameter of the formDelStaState function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36811

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the picName parameter of the formDelwebAuthPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36805

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple buffer overflows in the Saveqqlist function via the qqStr and markStr parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36820

Shenzhen Tenda Technology Co., Ltd Tenda W20E v15.11.0.6 was discovered to contain a buffer overflow in the webAuthWhiteUserInfo parameter of the formAddWebAuthWhiteUser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2026-48199

Shenzhen Tenda Technology Co., Ltd Tenda W15E v15.11.0.10 was discovered to contain a buffer overflow in the webAuthUserInfo parameter of the formAddWebAuthUser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...