CVE-2022-24637

CVE-2022-24637 — Open Web Analytics 1.7.4 이전 Open Web Analytics OWA 의 치명적인 비인증 정보 노출 취약점에 대한 방어적 노트로, 권한 상승으로 이어질 수 있습니다. echoCTF의 Fruityloops 박스를 작업하던 중 발견되었으며, 해당 박스는 Open Web Analytics 1.7.3 을 실행하고 있었습니다. 요약 필드| 세부 정보 ---|--- CVE| CVE-2022-24637 제품| Open Web Analytics 영향 받는 버전| 1.7.4 이전 버전 1.7...

CVE-2026-92893

CVE-2026-92893 affects the foreman_ansible Ruby gem (a Foreman plugin). The Ansible inventory API controller builds its host query using an unscoped Host.where call that fails to enforce the search filter tied to the caller's view_hosts permission. As a result, an authenticated user whose host vi...

mongobleed

mongobleed CVE-2025-14847 эксплойт для раскрытия кучи памяти MongoDB через чтение за пределами буфера OPCOMPRESSED при чтении. Использование root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port...

CVE-2023-5612

Disclosure of the public email in Tags RSS Feed https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possibl...

CVE-2026-92031

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: ImageLib component...

EUVD-2026-81397

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

CVE-2026-91099

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...

CVE-2026-91098

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain condition...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF и раскрытие локальных файлов О проекте Этот репозиторий содержит proof-of-concept для CVE‑2024‑58258 — уязвимости SugarCRM 13.0.4 / 14.0.1, при которой пользовательский ввод обрабатывается как LESS в API /css/preview, что позволяет неаутентифицированный SSRF или...

kernel: net: guard timestamp cmsgs to real error queue skbs

A flaw was found in the Linux kernel's networking component. This vulnerability allows a remote attacker to potentially access sensitive information or cause system instability. By sending specially crafted network packets, an attacker can exploit an issue in how the kernel handles timestamping f...

kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

kernel: netfilter: conntrack_irc: fix possible out-of-bounds read

A flaw was found in the Linux kernel's netfilter conntrackirc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

CVE-2025-58434-poc

CVE-2025-58434 — Захват учетной записи Flowise через утечку токена ⚠️ Этот репозиторий предназначен только для образовательных целей и авторизованных исследований безопасности. Несанкционированное использование против систем, которыми вы не владеете или не имеете явного разрешения на тестирование,...

CVE-2018-13379

CVE-2018-13379 - PoC обхода пути в FortiGate SSL-VPN Описание Скрипт Proof-of-Concept для CVE-2018-13379 — критической уязвимости обхода пути в веб-портале SSL VPN Fortinet FortiGate. Эта уязвимость позволяет неаутентифицированным злоумышленникам загружать системные файлы с помощью специально...

CVE-2026-91019

The Event Booking Manager for WooCommerce WordPress plugin before 5.6.0 does not restrict who can view its stored payment gateway configuration, allowing users with Contributor-level access and above to read the site's PayPal and Stripe credentials, including their secret keys...

CVE-2026-91016

The Motors WordPress plugin before 1.4.121 does not verify that a request is authorized to view a user's non-published listings before returning them, allowing unauthenticated attackers to read any author's draft, pending and private car listings - including titles, prices, media URLs and seller...

CVE-2026-90923

The Autopay WordPress plugin before 5.0.1 does not enforce the signature on one of its payment callbacks, allowing unauthenticated users to disclose and delete the stored payment parameters of other customers' orders...

CVE-2026-87836

The Comments Import & Export WordPress plugin before 2.5.4 does not restrict its comment export to users able to moderate comments, nor scope the export to content owned by the requesting user, allowing users with the Author role and above to retrieve every comment on the site, including commente...

CVE-2026-86446

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...