CVE-2026-105206

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2025-50110

CVE-2025-50110 Transmisión de información sensible en texto claro en la aplicación Android EagleEyes Lite 1. Resumen Nombre : EagleEyesLite Versión : 2.0.0 Proveedor : AVTECH CWE : CWE-319: Transmisión de información sensible en texto claro, CWE-598: Uso del método de solicitud GET con cadenas de...

CVE-2019-20085

📂 CVE-2019-20085 – Exploit de Directory Traversal en TVT NVMS-1000 Por Z3R0 Autor: Z3R0 CVE: CVE-2019-20085 Objetivo: TVT NVMS-1000 todas las versiones conocidas anteriores al parche Tipo de Vulnerabilidad: Directory Traversal sin autenticación Fecha: Inserte su fecha de publicación 🔍 Resumen de ...

CVE-2025-68722

CVE-2025-68722: Axigen WebAdmin CSRF Resumen de la vulnerabilidad Acciones críticas que cambian el estado en la interfaz Axigen WebAdmin son accesibles mediante solicitudes GET. Si bien el token h protege contra el CSRF directo, la aplicación procesa solicitudes en cola a través del parámetro s...

CVE-2018-6574

CVE-2018-6574 Exploit para ejecución remota de comandos en el comando go get de Golang. Introducción Cuando ejecutas go get con un paquete, Go está diseñado para compilar e instalar el paquete sin ejecutar ningún código de él. La intención es que puedas obtener, compilar e incluso instalar paquet...

CVE-2026-105206

ZITADEL versions 3.0.0 through 3.4.15 and 4.x before 4.17.3 are vulnerable to an incorrect authorization flaw in the User Service API . The vulnerability exists because the system verifies the user.read permission against the caller's organization rather than the organization that owns the target...

EUVD-2026-92099

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2026-105206 ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

CVE-2026-80844

CVE-2026-80844 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

CVE-2024-51428-PoC

CVE-2024-51428 - PoC de Inyección SQL Ciega en ZoneMinder Wrapper de Python para sqlmap diseñado para explotar CVE-2024-51428 en ZoneMinder. Esta herramienta automatiza la detección y explotación de una inyección SQL ciega , manteniendo una salida limpia y centrada en los datos útiles. El script...

CVE-2002-0201

CVE-2002-0201 Cyberstop Web Server para Windows 0.1 permite a atacantes remotos causar una denegación de servicio caída y posiblemente ejecutar código arbitrario mediante una solicitud HTTP GET larga, posiblemente desencadenando un desbordamiento de búfer. Publicación en Exploit-db en...

CVE-2018-6574-go-get-RCE

Este repositorio no tiene un README...

CVE-2004-2271-MiniShare-1.4.1-BOF

CVE-2004-2271 - MiniShare 1.4.1 - BOF Referencias https://nvd.nist.gov/vuln/detail/CVE-2004-2271 Vulnerabilidad MiniShare 1.4.1 no realiza comprobación de límites en las peticiones HTTP GET que recibe. Al enviar una petición HTTP GET larga y malformada, un atacante puede provocar un desbordamient...

LG Supersign EZ CMS - Remote Code Execution

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail. id: CVE-2018-17173 info: name: LG Supersign EZ CMS - Remote Code Execution author: pussycat0x severity: critical description: | LG SuperSign CMS allows remote attackers...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

PT-2026-104649

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component ImageConfig. The manipulation results in time-of-check time-of-use. The attack may be launched remotely. Upgrading to versio...

PT-2026-104617

A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get user id by email of the file cognee/modules/users/authentication/get api auth backend.py of the component JWT Signing Key Handler. The manipulation of the argument FASTAPI USERS JWT...

PT-2026-104620

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get environment of the file goldenverba/components/util.py of the component generate stream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attac...

PT-2026-104630

ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rather than the organization owning the target user. An authenticated member holding org-scoped user.read can query GET...

Fake_CVE-2020-1350

FakeCVE-2020-1350 Este es el código fuente de una herramienta de exploit falsa muy burda para CVE-2020-1350, desarrollada como parte del repositorio honeypot para la vulnerabilidad SIGRed, con el objetivo de rastrear/mapear el interés y los intentos de usar exploits para esta vulnerabilidad...