YesWiki < 4.5.4 - Cross-Site Scripting

YesWiki 4.5.4 contains a reflected cross-site scripting caused by unsanitized idformulaire parameter in /?BazaR endpoint, letting attackers steal cookies and hijack sessions, exploit requires user to click malicious link. id: CVE-2025-46550 info: name: YesWiki 4.5.4 - Cross-Site Scripting author:...

your-bot-my-inbox-cve-2026-68929-fastgpt-unauthenticated-wechat-channel-hijack

CVE-2026-68929 — FastGPT WeChat-Kanal-Übernahme PoC Unauthentifizierte, mandantenübergreifende Übernahme des WeChat- iLink- Freigabekanals von FastGPT, die nur auf der öffentlichenshareId basiert...

RP_RecordClip_DLL_Hijack

Vulnerabilità di DLL Hijack remota in Real Player CVE-2022-32291 L'applicazione Player che è vulnerabile all'avvio di Real Converter e il Recording Manager sono soggetti a un problema di DLL hijack remoto binary planting a causa della ricerca non sicura di DLL inesistenti. Per sfruttare il...

CVE-2025-32463-EXPLOIT

Xpl0it — Sudo NSS Library Hijack | v0.0.4 Autor: 0xb0rn3 | 0xbv1 Typ: Proof of Concept PoC Sicherheitsforschungswerkzeug CVE: CVE-2023-42456 Technik: sudo -R chroot NSS-Bibliotheksinjektion → Privilegieneskalation zu root ⚠️ Haftungsausschluss Dieses Tool ist nur für autorisierte Penetrationstests...

CVE-2026-13734

Zephyr RTOS's WireGuard data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c validated the anti-replay counter only after committing several peer-state mutations (endpoint roaming update, liveness timers, and keypair rotation). Because the AEAD tag authenti...

CVE-2026-13734 Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

ksmbrace

ksmbrace Schwachstellenforschung in ksmbd , dem SMB3-Server im Linux-Kernel fs/smb/server/. Schwachstellen für authentifizierte Angreifer auf den Durable-Handle- und Pfadauflösungspfaden von ksmbd. Der Name spielt auf das Race-Condition-Thema dieser Arbeit an siehe die zurückgehaltene...

EUVD-2026-42698

Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass...

randomrepo

SecOpsMaestro POC dirottamento account Github - Baidu - H1...

slui-file-handler-hijack-privilege-escalation

Slui Dateihandler-Hijack LPE Exploit-Informationen| ---|--- Datum| 15.01.2018 Gepatcht| Windows 10 20H1 19041 exploit-db| 44830 Getestet auf| Windows 8-10, unabhängig von x86/x64 Beschreibung slui.exe ist eine automatisch erhöhte Binärdatei, die anfällig für Dateihandler-Hijacking ist. Bei der...

CVE-2026-8206

CVE-2026-8206 - Exploit di Massa per il Plugin Kirki WordPress Strumento di sfruttamento di massa per CVE-2026-8206 – una vulnerabilità critica nel plugin Kirki WordPress versioni ≤ 6.0.6 che consente a un attaccante non autenticato di dirottare i link di reset della password e di assumere il...

Kotaemon-CVE-2025-56526-56527-disclosure

Divulgazione pubblica di Kotaemon CVE-2025-56526 e CVE-2025-56527 Lo Stored Cross-Site Scripting nel pannello informativo di Kotaemon si combina con l'archiviazione in chiaro delle credenziali in localStorage, consentendo il pieno compromesso della sessione a partire da un singolo caricamento di ...

CVE-2022-0847

CVE-2022-0847 Modifiziertes Dirtypipe-Skript, das automatisch Root-Rechte gewährt, ohne manuell nach einer Datei suchen zu müssen, um ein SUID-Binary zu kapern. Kompilieren gcc dirty.c -o dirty gcc dirtypipe2.c -o dirty Ausführen ./dirty Und du erhältst automatisch Root-Rechte Modifiziert...

mindmanager-poc

mindmanager-poc Betroffene Anwendung: MindManager23setup.exe Plattform: Windows Problem: Lokale Privilegienerweiterung über den Reparaturmodus des MSI-Installers EXE-Hijacking-Race-Condition Entdeckt und gemeldet von: Pawel Karwowski und Julian Horoszkiewicz Eviden Red Team Vorgeschlagene...

Simplog-Exploit

Simplog-Exploit Questo repository contiene la configurazione, l'exploit e la patch per la vulnerabilità CSRF CVE-2009-4092 di Simplog. La vulnerabilità risiede nel file user.php di Simplog 0.9.3.2, un'applicazione web utilizzata per fornire alle persone un modo semplice per creare e mantenere un...

acCOMplice

acCOMplice شريكك في اختطاف COM المؤلف: David Tulis @kafkaesqu3 نظرة عامة يحتوي هذا المستودع على نماذج أكواد وإثباتات مفاهيم لاستكشاف اختطاف COM. اختطاف COM هو تقنية استغلال لاحقة على نظام Windows، ويمكن استخدامها لتحقيق الثبات persistence أو التهرب من الدفاع defense evasion. لمزيد من المعلومات حو...

CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-68929

FastGPT , an open-source LLM platform, is vulnerable to unauthenticated WeChat channel hijack and denial of service in versions prior to 4.15.2 . The WeChat (iLink) share-channel endpoints authorize requests using only the publicly exposed shareId , with no authenticated identity or team-ownershi...

CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Overflow baseado em pilha para Execução Remota de Código via sequestro de fluxo de execução e exploração de manipulação de múltiplos registradores; CVEs são: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marcado como N1 - N7...