311489 matches found
EUVD-2026-67927
Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2021-32789
💣 CVE-2021-32789 Exploit di dump degli utenti di Wordpress WooCommerce Dump utente admin root@kitploit: woo -u http://example.com Dump di tutti gli utenti root@kitploit: woo -u http://example.com -dump...
cve-2000-0649
CVE-2000-0649 für Apache CVE-2000-0649 ist eine Schwachstelle mit geringem Risiko, die potenziell die internen IP-Adressen des Servers aus dem Location-Parameter im Antwort-Header preisgeben kann. Offizielle Details finden Sie hier: Rapid7:...
CVE-2026-28867-PoC
CVE-2026-28867 Come funziona La vulnerabilità esiste perché l'implementazione del kernel di tcpsysctlinfo esegue una ricerca globale per la connessione senza verificare che il processo chiamante possieda il socket o disponga di privilegi elevati come root. Impatto Un attaccante senza privilegi pu...
CVE-2026-61802
Wazuh (open-source XDR/SIEM platform), versions 4.14.0 through 4.14.6 , contains a configuration-redaction gap: the GET /cluster/local/config endpoint is gated only by cluster:read permission and lacks the mask_sensitive_config decorator that all sibling config-read endpoints carry. As a result, ...
CVE-2026-61802 Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...
CVE-2026-61802 Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...
CVE-2025-5777-Exploit
Strumento Exploit CVE-2025-5777 🔥 Un potente strumento didattico progettato per dimostrare e analizzare la vulnerabilità CVE-2025-5777 che colpisce Citrix NetScaler VPN. Questo progetto fa parte dell'iniziativa GO-TO CVE. ⚠️ Solo per scopi educativi. NON utilizzare questo strumento su sistemi che...
CVE-2026-78174
WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log and extract a Super Administrator's session token while that administrator is logged in, enabling account takeover . The vul...
CVE-2026-61783
Wazuh versions 4.14.0 through 4.14.6 contain an RBAC logic flaw in the mask_sensitive_config() decorator. The gate that determines whether sensitive values are masked checks only whether a manager:update_config or cluster:update_config rule exists, without evaluating whether that rule's effect is...
CVE-2026-61783 Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...
CVE-2026-61783 Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...
HAProxy-CVE-2023-45539-PoC
HAProxy-CVE-2023-45539-PoC HAProxy precedente alla versione 2.8.2 accetta come parte del componente URI, il che potrebbe consentire a un attaccante remoto di ottenere informazioni sensibili o avere un impatto non specificato a causa di un'interpretazione errata di una regola pathend, come...
Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure (CVE-2026-3159)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure. Vulnerability Details CVEID:CVE-2026-3159 DESCRIPTION: IBM IBM Sterling File Gateway is vulnerable to an information disclosure due to sensitive information being included...
CVE-2025-44823
Esposizione autenticata di chiavi API in Nagios Log Server 2024R1.3.1 ▶️ PoC Demo ID CVE: CVE-2025-44823 Data: 2025-04-02 Autori: Alex Tisdale, Seth Kraft Homepage del fornitore: https://www.nagios.com/ Changelog del fornitore: https://www.nagios.com/changelog/log-server Link del software:...
CVE-2025-14847-mongobleed
CVE-2025-14847-mongobleed CVE-2025-14847 mongobleed file Python CVE-2025-14847 CVE-2025-14847 https://jira.mongodb.org/browse/SERVER-115508 SOMMARIO Questa è una correzione critica per affrontare CVE-2025-14847. Aggiornare a 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, o 4.4.30. DESCRIZIONE DEL PROBLEM...
Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the vulnerability. Vulnerability Details CVEID:CVE-2026-33558 DESCRIPTION: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses...
CVE-2023-23752
CVE-2023-23752 Codice di exploit per la divulgazione di informazioni in Joomla, scritto in C++...
Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure (CVE-2026-3158)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure Vulnerability Details CVEID:CVE-2026-3158 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM...
