Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

DELMIA Apriso - Broken Access Control

DELMIA Apriso Release 2020 through Release 2025 contains a broken access control vulnerability caused by missing authorization, letting attackers gain privileged access to the application, exploit requires no special conditions. id: CVE-2025-6205 info: name: DELMIA Apriso - Broken Access Control...

MeteoBridge <= 6.1 - Remote Code Execution

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.This web interface exposes an endpoint that is vulnerable to command injection.Remote...

Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx...

SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass

The SureTriggers- All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

Kerio Control v9.2.5 - CRLF Injection

Kerio Control, formerly known as Kerio WinRoute Firewall, has been found vulnerable to multiple HTTP Response Splitting vulnerabilities in product affecting versions 9.2.5 id: CVE-2024-52875 info: name: Kerio Control v9.2.5 - CRLF Injection author: ritikchaddha,iamnoooob,rootxharsh,pdresearch...

CVE-2024-4761

CVE-2024-4761 Hochriskante CVE-2024-4761-Exploit Google hat Notfall-Sicherheitsupdates veröffentlicht, um eine als CVE-2024-4761 eingestufte Sicherheitslücke mit hohem Schweregrad im Chrome-Browser zu beheben. Die Sicherheitslücke ist ein Out-of-Bounds-Schreibfehler, der in der V8-JavaScript-Engi...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

Rapporto di analisi della vulnerabilità CVE-2025-14502 Riepilogo della vulnerabilità Tipo di vulnerabilità : Inclusione locale di file Local File Inclusion, LFI Versioni interessate : News and Blog Designer Bundle 1.1 e tutte le versioni precedenti Gravità : Alta Complessità dell'attacco : Bassa...

informer

Informer – Telegram-Massenüberwachung Update 10-20-2025 Sicherheit : Behobene kritische Sicherheitslücke CVE-2022-1941 in mysql-connector-python Sicherheit : Migration von veraltetem oauth2client zu google-auth Alle Abhängigkeiten auf die neuesten sicheren Versionen aktualisiert Fehler im...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Bypass del Credit-Control del protocollo Diameter in 5G Codice del programma simulatore Diameter in Python root@kitploit: diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link फ़ैक्टरी रीसेट एक्सप्लॉइट प्रोग्राम कोड Python Zigbee सिमुलेशन root@kitploit: zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself,...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – Iniezione di header SMTP nel modulo di contatto Codice del programma Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender =...

CVE-2026-22812

🔐 CVE-2026-22812 - Servidor HTTP Não Autenticado do OpenCode → Execução Remota de Código RCE Aviso de segurança, análise técnica, orientações de detecção e notas de mitigação para CVE-2026-22812 📌 Visão Geral CVE-2026-22812 é uma vulnerabilidade de Execução Remota de Código RCE de alta gravidade...

CVE-2024-30088-

Debolezza: CWE-367: Time-of-check Time-of-use TOCTOU Race Condition Fonte CVSS: Microsoft CVSS: 3.1 7.0 / 6.3...

CVE-2025-60656

CVE-2025-60656 - Cross-Site Scripting XSS memorizzato sulla Homepage | ---|--- Ricercatori| DotAdrien Gravità| 8.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Software| Script Pag Descrizione...

tsunami-security-scanner

Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...

CVE-2022-22978-demo

CVE-2022-22978-demo Codice di esempio della vulnerabilità CVE-2022-22978 Prerequisiti per lo sfruttamento Anche se classificata come ad alta gravità, le condizioni di sfruttamento sono comunque piuttosto restrittive; personalmente ritengo che questa vulnerabilità sia piuttosto insignificante. 1...

CVE-2018-14667

CVE-2018-14667 Dopo aver trascorso molto tempo per comprendere e sfruttare correttamente questa CVE, ho deciso di creare un repository sul bug RCE di RichFaces 3.X e condividere i HOWTO passo dopo passo con la comunità. 0x00 : Introduzione al bug di RichFaces 3.X Lunedì 19 novembre, Joao F M...