101135 matches found
CVE-2024-30896
CVE-2024-30896 Summary A business logic flaw in influxdb allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorization tokens. Scenario Attacker might be a user which was gained access by an administrator via an allAccess token only...
EUVD-2026-71778
ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly destroy every host pool, removing traff...
CVE-2023-43208-PoC
Mirth Connect RCE Exploit CVE-2023-43208 This script is a Proof of Concept PoC for the Remote Code Execution RCE vulnerability in Mirth Connect versions prior to 4.4.1. It exploits an XStream deserialization vulnerability through the API. Requirements Python 3.10 or higher Compatible with 3.13...
CVE-2025-2502
Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...
CVE-2024-38077
В этом репозитории нет README...
CVE-2021-28663
CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...
zerologon
Zerologon مجموعة من النصوص البرمجية، لاختبار واستغلال ثغرة zerologon CVE-2020-1472 ما هي؟ ZeroLogon هي ثغرة تسمح لنا باستغلال عيب في تشفير بروتوكول Netlogon Remote Protocol MS-NRPC الخاص بخدمة Active Directory من مايكروسوفت، والذي يسمح للمستخدمين بتسجيل الدخول إلى الخوادم باستخدام NTLM. الخطوات...
CVE-2023-38408
Vulnérabilité OpenSSH - CVE-2023-38408 📚 Introduction Une vulnérabilité a été découverte dans OpenSSH versions antérieures à 9.3p2. La fonctionnalité PKCS11 dans ssh-agent d'OpenSSH possède un chemin de recherche insuffisamment fiable, conduisant à une exécution de code à distance si un agent est...
Session-Fixation-in-Vvveb-CMS-v1.0.6.1
Session Fixation in Vvveb CMS v1.0.6.1 Author: Andrew Paul Date of Discovery: June 9th, 2025 Vendor: Vvveb Vendor URL: http://vvveb.com Vendor GitHub: https://github.com/givanz/Vvveb Affected Version: 1.0.6.1 and likely prior versions CVE ID: CVE-2025-8517 Summary A Session Fixation vulnerability...
ghauri
Like Ghauri, consider supporting the developer...
CVE-2026-53576
Kestra Unauthenticated RCE Exploit CVE-2026-53576 Critical Authentication Bypass leading to Unauthenticated Remote Code Execution Exploit • Vulnerability Details • Impact • Remediation ⚠️ DISCLAIMER This tool is for educational and authorized security testing purposes only. DO NOT use this against...
Dirty-Frag-CVE-2026-43284
Dirty Frag CVE-2026-43284 and CVE-2026-43500 Exploit Reproduction and Detection Lab for a Linux kernel local privilege escalation chain. Status: VERIFIED. I completed the reproduction, the fileless verification, and the syscall-level detection in the lab kernel 6.18.9+kali-amd64. This document is...
CVE-2019-11043
CVE-2019-11043 Vulnerability Description When Nginx's fastcgisplitpathinfo processes requests containing %0a, it encounters a newline \n causing PATHINFO to be empty. Meanwhile, php-fpm has a logic flaw when handling empty PATHINFO. An attacker can achieve remote code execution through careful...
cve-2021-21735-zte-zxhn-h168n-admin-compromise
CVE-2021-21735 : Fuite d'informations vers compromission totale de l'administration du ZTE ZXHN H168N Étude de cas technique et article prêt pour GitHub Pages pour CVE-2021-21735 dans le ZTE ZXHN H168N V3.5. Ce dépôt se concentre sur la faille de routage du firmware derrière les points de...
CVE-2026-57827
CVE-2026-57827 — Composant Joomla RSFiles! — RCE par téléversement de fichier non authentifié Contournement du téléversement par contrôleur scindé → Tâche d'écriture directe → /downloads/shell.php → RCE Vue d'ensemble CVE-2026-57827 est une vulnérabilité critique CVSS 9.8 de téléversement de...
CVE-2024-9014
This post is a research article published by EQSTLab. CVE-2024-9014 ★ CVE-2024-9014 Sensitive Information Exposure PoC ★ Description CVE-2024-9014 : pgAdmin4 Sensitive Information Exposure description: pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication...
mitigation-cve-2019-9787
mitigation-cve-2019-9787 POC 1. simply xss : 2. simple csrf: attacker's website code--- https://github.com/kuangting4231/wordpress.github.io 3. csrf remote code execution: attacker's website code--- https://github.com/kuangting4231/assigment1.github.io mitigation 1. fix the logic flaw in the...
CVE-2024-58378
Nokogiri before 1.15.6 and 1.16.x before 1.16.2, when using bundled libxml2, is affected by the libxml2 flaw CVE-2024-25062...