103 matches found
Cartero
┘Г╪з╪▒╪к╪▒┘И ╪з┘Д╪▒╪з╪и╪╖ http://section9labs.github.io/Cartero/ ╪з┘Д┘И╪╡┘Б ╪е╪╖╪з╪▒ ╪╣┘Е┘Д ┘В┘И┘К ┘Д┘Д╪к╪╡┘К╪п ╪з┘Д╪з╪н╪к┘К╪з┘Д┘К ┘Е╪╣ ┘И╪з╪м┘З╪й ╪│╪╖╪▒ ╪г┘И╪з┘Е╪▒ ┘Е╪к┘Г╪з┘Е┘Д╪й. ┘И┘П┘Д╪п ╪з┘Д┘Е╪┤╪▒┘И╪╣ ┘Е┘Ж ╪з┘Д╪н╪з╪м╪й ╪з┘Д┘Е┘Д╪н┘С╪й ╪╣╪и╪▒ ╪│┘Ж┘И╪з╪к ┘Е┘Ж ╪з┘Д╪к╪╣╪з┘Е┘Д ┘Е╪╣ ╪г╪п┘И╪з╪к ┘Д┘Е ╪к╪д╪п┘Р┘С ╪з┘Д┘Е╪╖┘Д┘И╪и. ┘И╪╣┘Д┘Й ╪з┘Д╪▒╪║┘Е ┘Е┘Ж ┘И╪м┘И╪п ╪з┘Д╪╣╪п┘К╪п ┘Е┘Ж ╪з┘Д┘Е╪┤╪з╪▒┘К╪╣ ┘Б┘К ┘З╪░╪з ╪з┘Д┘Е╪м╪з┘Д╪М ┘Д┘Е ┘Ж╪к┘Е┘Г┘Ж ┘Е┘Ж ╪е┘К╪м╪з╪п ╪н┘Д ┘Е┘Ж╪з╪│╪и ┘К┘Е┘Ж╪н┘Ж╪з ╪│┘З┘И┘Д╪й ╪з┘Д╪з╪│╪к╪о╪п╪з...
CVE-2024-23724
╪к╪л╪и┘К╪к ╪з┘Д╪к╪л╪и┘К╪к ╪з┘Д╪к┘Д┘В╪з╪ж┘К ┘Е┘И╪╡┘Й ╪и┘З ┘Д╪з╪о╪к╪и╪з╪▒ ╪з┘Д╪л╪║╪▒╪й╪М ┘Ж╪н╪к╪з╪м ╪е┘Д┘Й ╪н╪│╪з╪и┘К┘Ж: ╪н╪│╪з╪и ╪и╪п┘И╪▒ ╪з┘Д┘Е╪│╪д┘И┘Д ╪з┘Д┘Е╪з┘Д┘Г ┘И╪н╪│╪з╪и ╪и╪п┘И╪▒ ╪з┘Д┘Е╪│╪з┘З┘Е. ┘Б┘К Ghost CMS╪М ┘К╪м╪и ╪г┘И┘Д╪з┘Л ╪з┘Д┘И╪╡┘И┘Д ╪е┘Д┘Й ┘Д┘И╪н╪й ╪з┘Д╪е╪п╪з╪▒╪й ┘Д╪е┘Ж╪┤╪з╪б ╪н╪│╪з╪и ╪з┘Д┘Е╪з┘Д┘Г╪М ╪л┘Е ┘Е┘Ж ┘З╪░╪з ╪з┘Д╪н╪│╪з╪и╪М ╪п╪╣┘И╪й ┘Е╪│╪з┘З┘Е ┘Д╪е┘Ж╪┤╪з╪б ╪н╪│╪з╪и┘З ╪з┘Д╪о╪з╪╡. ┘И┘Е╪╣ ╪░┘Д┘Г╪М ┘Б┘К Ghost╪М ╪з┘Д╪╖╪▒┘К┘В╪й ╪з┘Д┘И╪н┘К╪п╪й ┘Д╪п╪╣┘И╪й ┘Е╪│╪з┘З┘Е ┘З┘К ╪е╪▒╪│╪з┘Д ╪▒╪з╪и╪╖ ╪п╪╣┘И╪й ╪╣╪и╪▒...
CVE-2023-7028
CVE-2023-7028 ╪к┘Е ╪з┘Г╪к╪┤╪з┘Б ┘Е╪┤┘Г┘Д╪й ┘Б┘К GitLab CE/EE ╪к╪д╪л╪▒ ╪╣┘Д┘Й ╪м┘Е┘К╪╣ ╪з┘Д╪е╪╡╪п╪з╪▒╪з╪к ┘Е┘Ж 16.1 ┘В╪и┘Д 16.1.6╪М ┘И16.2 ┘В╪и┘Д 16.2.9╪М ┘И16.3 ┘В╪и┘Д 16.3.7╪М ┘И16.4 ┘В╪и┘Д 16.4.5╪М ┘И16.5 ┘В╪и┘Д 16.5.6╪М ┘И16.6 ┘В╪и┘Д 16.6.4╪М ┘И16.7 ┘В╪и┘Д 16.7.2 ╪н┘К╪л ┘К┘Е┘Г┘Ж ╪к╪│┘Д┘К┘Е ╪▒╪│╪з╪ж┘Д ╪е╪╣╪з╪п╪й ╪к╪╣┘К┘К┘Ж ┘Г┘Д┘Е╪й ┘Е╪▒┘И╪▒ ╪н╪│╪з╪и ╪з┘Д┘Е╪│╪к╪о╪п┘Е ╪е┘Д┘Й ╪╣┘Ж┘И╪з┘Ж ╪и╪▒┘К╪п ╪е┘Д┘Г╪к╪▒┘И┘Ж┘К ╪║┘К╪▒ ┘Е┘И╪л┘С┘В. ╪к┘Е ╪з╪о╪к╪и╪з...
evil-winrar
eval-winrar evil-winrar╪М ╪е╪╖╪з╪▒ ╪╣┘Е┘Д ┘Д╪з╪│╪к╪║┘Д╪з┘Д ╪л╪║╪▒╪з╪к cve-2023-38831 ┘И╪з┘Д┘З╪м┘Е╪з╪к ╪з┘Д┘З┘Ж╪п╪│┘К╪й ╪з┘Д╪з╪м╪к┘Е╪з╪╣┘К╪й evil-winrar╪М ╪е╪╖╪з╪▒ ╪╣┘Е┘Д ╪з╪│╪к╪║┘Д╪з┘Д ╪з┘Д╪л╪║╪▒╪з╪к ┘И╪з┘Д┘З╪м┘Е╪з╪к ╪з┘Д┘З┘Ж╪п╪│┘К╪й ╪з┘Д╪з╪м╪к┘Е╪з╪╣┘К╪й csv-2023-38831 ┘Е┘В╪п┘Е╪й evil-winrar ┘З┘И ╪е╪╖╪з╪▒ ╪╣┘Е┘Д ┘Д╪з╪│╪к╪║┘Д╪з┘Д ╪л╪║╪▒╪з╪к csv-2023-38831 ┘Б┘К winrar ┘И╪з┘Д┘З╪м┘Е╪з╪к ╪з┘Д┘З┘Ж╪п╪│┘К╪й ╪з┘Д╪з╪м╪к┘Е╪з╪╣┘К╪й╪М ┘И┘К╪п╪╣┘Е ╪к┘И┘Д┘К╪п ╪з┘Д╪з╪│╪к╪║┘Д╪з┘Д╪з...
CVE-2026-51788
рд╕реБрд░рдХреНрд╖рд╛ рд╕рд▓рд╛рд╣рдХрд╛рд░: CVE-2026-51788 cleverangeauth v0.1.10 рдореЗрдВ рд╕реЗрд╡рд╛ рд╕реЗ рд╡рдВрдЪрд┐рдд рдХрд░рдиреЗ DoS рдХреА рдХрдордЬрд╝реЛрд░реА CVE ID: CVE-2026-51788 рд╕реНрдерд┐рддрд┐: рдЖрд╡рдВрдЯрд┐рдд рдЦреЛрдЬ рдХреА рддрд┐рдерд┐: 2026-04-27 рд╢реЛрдзрдХрд░реНрддрд╛: Aykhan Isgandarli рдЧрдВрднреАрд░рддрд╛: рдЙрдЪреНрдЪ CVSS v3.1: 7.5 CVSS рд╡реЗрдХреНрдЯрд░: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H рдкреНрд░рднрд╛рд╡рд┐рдд рдЙрддреНрдкрд╛рдж:...
GitLab - Account Takeover via Password Reset
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to a...
CVE-2023-23397-POC
CVE-2023-23397-POC PoC ╪и╪│┘К╪╖ ┘Д╪л╪║╪▒╪й CVE-2023-23397╪М ┘К╪к┘Е ╪е╪▒╪│╪з┘Д ╪з┘Д╪н┘Е┘И┘Д╪й ╪╣╪и╪▒ ╪з┘Д╪и╪▒┘К╪п ╪з┘Д╪е┘Д┘Г╪к╪▒┘И┘Ж┘К...
CVE-2024-21413
CVE-2024-21413 ╪л╪║╪▒╪й ╪к┘Ж┘Б┘К╪░ ╪з┘Д╪к╪╣┘Д┘К┘Е╪з╪к ╪з┘Д╪и╪▒┘Е╪м┘К╪й ╪╣┘Ж ╪и┘П╪╣╪п ┘Б┘К Microsoft Outlook https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u ╪╣┘Ж┘И╪з┘Ж ╪з┘Д╪и╪▒┘К╪п ╪з┘Д╪е┘Д┘Г╪к╪▒┘И┘Ж┘К ┘Д┘Д┘Е╪▒╪│┘Д -p ┘Г┘Д┘Е╪й...
CVE-2024-21413
CVE-2024-21413 | рдорд╛рдЗрдХреНрд░реЛрд╕реЙрдлреНрдЯ рдЖрдЙрдЯрд▓реБрдХ рд░рд┐рдореЛрдЯ рдХреЛрдб рдПрдХреНрдЬреАрдХреНрдпреВрд╢рди рднреЗрджреНрдпрддрд╛ PoC ЁЯЪА рдЙрдкрдпреЛрдЧ рд╕реБрдирд┐рд╢реНрдЪрд┐рдд рдХрд░реЗрдВ рдХрд┐ рдЖрдкрдХреЗ рдкрд╛рд╕ рдЗрд╕ рд╕реНрдХреНрд░рд┐рдкреНрдЯ рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░рдиреЗ рд╕реЗ рдкрд╣рд▓реЗ рд▓рдХреНрд╖реНрдп рд╕рд┐рд╕реНрдЯрдо рд╕реНрд╡рд╛рдореА рд╕реЗ рдЙрдкрдпреБрдХреНрдд рдЕрдиреБрдорддрд┐рдпрд╛рдБ рдФрд░ рдкреНрд░рд╛рдзрд┐рдХрд░рдг рд╣реИред рдЖрд╡рд╢реНрдпрдХ рд╢рд░реНрддреЗрдВ Python 3.x impacket-smbserver рдЙрдкрдпреЛрдЧ рдЙрджрд╛рд╣рд░рдг root@kitploit: sudo python3...
CVE-2026-71393
CVE-2026-71393 affects GNU Emacs for Android. A 32-bit font length value in sfnt_read_name_table() can overflow when computing the allocation size, causing an undersized heap allocation. A crafted TrueType font can trigger a read() past the buffer, leading to heap memory corruption and potential ...
CVE-2026-54217
Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a stored XSS vulnerability. An attacker can send an email containing malicious JavaScript code. When a user accesses the email, the stored cross-site scripting is triggered. This issue affects TeamDavid through Rollout 524...
CVE-2026-13156
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...
EUVD-2026-45890
The MailerSend WordPress plugin before 1.0.8 does not perform a nonce check on its configuration-delete action it verifies the manageoptions capability but ignores the nonce, so an attacker can trick a logged-in administrator into visiting a crafted page that wipes the MailerSend WordPress plugin...
CVE-2026-50635
LimeSurvey Password Reset Host Header Injection: The system builds password-reset links from the client-supplied Host header without validating it; the default config leaves the allowlist undefined, so LSHttpRequest::checkIsAllowedHost() does nothing. A remote, unauthenticated attacker can reques...
PT-2026-45038
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.10 Description Admidio contains a Cross-Site Request Forgery CSRF flaw in the modules/registration.php endpoint. When the mode parameter is set to send login, the application fails to validate the adm csrf token a...
CVE-2026-25602
Summary: CVE-2026-25602 affects Mesalvo MeonaтАЩs Client Launcher and Server components with an insufficient verification of data authenticity. This could enable sending messages to arbitrary email addresses. Affected components and scope: Meona Client Launcher Component (affected up to 19.06.2020 ...
EUVD-2026-31094
Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component:...
CVE-2026-25602
Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component:...
plunk цХ░цНоф╝кщАащЧощвШц╝Пц┤Ю
Plunk is an open-source email sending and management platform developed by Plunk. Versions of Plunk prior to 0.9.0 contained a data manipulation vulnerability. This vulnerability stems from the /webhooks/sns endpoint accepting Amazon SNS notification payloads without verifying the SNS signature,...
PT-2026-37296
Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An issue exists in the 'objects/sendEmail.json.php' endpoint where the absence of the contactForm parameter allows unauthenticated users to send emails to arbitrary recipients. When this parameter is...