CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR Una piccola CLI in Rust che riproduce il pattern di divulgazione di informazioni associato a CVE-2015-6668 Job Manager //nomefile.estensione. Pattern di attacco: brute-force / enumerazione delle cartelle anno/mese comuni e delle varianti dei nomi file per...

CVE-2025-62168

CVE-2025-62168 — PoC per la perdita di token in Squid Proxy L'autore non si assume alcuna responsabilità per usi impropri o danni causati da questo strumento. La ricerca è fornita esclusivamente a scopo educativo e difensivo. Descrizione Questo repository contiene un Proof-of-Concept PoC per...

CVE-2017-5487

PoC - CVE-2017-5487 - Enumerazione degli utenti WordPress via REST Configurazione root@kitploit: git clone https://github.com/ndr-repo/CVE-2017-5487.git powershell -noexit -ExecutionPolicy Bypass -File .ps1 Utilizzo root@kitploit: .\Enumerate-WordPressOrgMembersREST.ps1 Percorso Alternativo 1 per...

CVE-2020-24227

CVE-2020-24227 Playground Sessions - Memorizzazione delle credenziali utente in chiaro Playground Sessions v2.5.582 e versioni precedenti per Windows memorizza le credenziali utente in testo semplice, consentendo a chiunque abbia accesso a C:\Users\AppData\Roaming\Playground\Local...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR on-prem versione precedente alla "4.4.0" è soggetto a una vulnerabilità di divulgazione di informazioni tramite i seguenti URL: root@kitploit: https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds...

CVE-2020-12593

CVE-2020-12593 CVE-2020-12593 POC La versione on-prem di Symantec EDR precedente alla "4.5" è soggetta a una vulnerabilità di divulgazione di informazioni tramite il seguente URL : root@kitploit: https://@IPEDR/atpapi/v2/policies/blacklist Riferimenti...

CVE-2017-10797

CVE-2017-10797 CVE-2017-10797- Benutzer-Enumeration im OwnCloud Server 8.1-10.0...

CVE-2021-39174-PoC

CVE-2021-39174-PoC Cachet-Konfigurationsleck-Dumper. CVE-2021-39174 PoC...

CVE-2026-80552

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability occurs because the system fails to properly validate index ranges for read/write operations on existing regions. This oversight could allow an attacker to perform out-of-bounds memory access, potentially leadin...

CVE-2019-8449

CVE-2019-8449 Exploit CVE-2019-8449 per Jira versioni precedenti alla v8.3.4 Punteggio CVSS: 5.0 Tipo/i di vulnerabilità: Divulgazione di informazioni Autenticazione: Non richiesta Versioni interessate: 2.1 - 8.3.4 Data di pubblicazione: 2019-09-11 Exploit-DB:...

CVE-2026-80561

A flaw was found in the Linux kernel's libceph component. A malicious or compromised Object Storage Device OSD can exploit multiple unsafe decode operations within the decodelocker function. This can lead to slab-out-of-bounds reads, potentially allowing an attacker to disclose sensitive...

EUVD-2026-67065

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

EUVD-2026-67061

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-81684

openssl_encrypt (pip package openssl-encrypt) versions ≤ 1.4.8 contain an information disclosure flaw in its desktop GUI. The steganography password is passed to a CLI child process via the --stego-password command-line argument (on both encrypt and decrypt paths) rather than through an environme...

EUVD-2026-67040

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

CVE-2026-81684 openssl_encrypt before 1.4.9 Information Disclosure via Command Line

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

CVE-2026-81684 openssl_encrypt before 1.4.9 Information Disclosure via Command Line

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

CVE-2026-81682

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI. The GUI writes decrypted plaintext with world-readable default permissions , allowing unprivileged local users on multi-user systems to read decrypted output files. The CVSS 3.1 score is 6...

CVE-2026-81679

OpenRemote versions before 1.28.0 are affected by a cross-realm information disclosure vulnerability in the Notification REST API . An attacker with read:admin credentials in a single realm can issue a zero-parameter GET request to the notification endpoint and retrieve sent notification metadata...

EUVD-2026-67035

OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to read all tenants' sent notifications including message bodies. Attackers with read:admin credentials in one realm can submit a...