CVE-2026-20805-POC

CVE-2026-20805 PoC Prova di concetto per la vulnerabilità di divulgazione di informazioni in Desktop Windows Manager dwm.exe di Microsoft. 📋 Riepilogo della Vulnerabilità ID: CVE-2026-20805 Prodotto: Microsoft Windows Componente: Desktop Windows Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensiti...

CVE-2025-60188-Atarim-Plugin-Exploit

CVE-2025-60188-Atarim-Plugin-Exploit CVE-2025-60188: تجاوز المصادقة في إضافة Atarim عبر تزوير HMAC نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC وتحليل فني للثغرة CVE-2025-60188، وهي ثغرة حرجة تم اكتشافها في إضافة Atarim الخاصة بووردبريس. تسمح هذه الثغرة للمستخدمين غير المصادق عليهم بتجاوز...

CVE-2025-11174

CVE-2025-11174: Document Library Lite WordPress प्लगइन में बिना प्रमाणीकरण के सूचना प्रकटीकरण कीवर्ड: CVE-2025-11174, Document Library Lite कमजोरी, सूचना प्रकटीकरण, WordPress सुरक्षा, बिना प्रमाणीकरण का AJAX शोषण, WordPress प्लगइन कमजोरी, CWE-862, WordPress दस्तावेज़ प्लगइन सुरक्षा, प्राधिकरण...

CVE-2020-2733

CVE-2020-2733 - JD Edwards EnterpriseOne Tools 관리자 비밀번호가 적절히 보호되지 않음 그림 1: 문자열 복호화 그림 2: URL을 지정하여 복호화 CVE-2020-2733 애플리케이션: JD Edwards EnterpriseOne Tools 영향을 받는 버전: JD Edwards EnterpriseOne Tools 9.2 공급업체 URL: https://oracle.com/ 버그: 정보 공개 보고일: 2019년 9월 18일 공개 권고일: 2022년 8월 23일 참조:...

CVE-2023-47459

CVE-2023-47459 Beschreibung Eine Schwachstelle wurde in Knovos Discovery v.22.67.0 entdeckt, die es einem entfernten Angreifer ermöglicht, vertrauliche Informationen über die folgenden Komponenten abzurufen: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName,...

CVE-2026-74747

creationtimestamp| type| source ---|---|--- 2026-08-27 01:43:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117164934142622275...

CVE-2025-14847

CVE-2025-14847 Ambiente de vulnerabilidade CVE-2025-14847 com um PoC https://jira.mongodb.org/browse/SERVER-115508 RESUMO Esta é uma correção crítica para abordar CVE-2025-14847. Atualize para 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 ou 4.4.30. DESCRIÇÃO DO PROBLEMA E IMPACTO Uma exploração no lado ...

EQGRP_Lost_in_Translation

EQGRP Lost in Translation Contenuto decriptato di odd.tar.xz.gpg, swift.tar.xz.gpg e windows.tar.xz.gpg Scaricato da https://yadi.sk/d/NJqzpqo3GxZA4 Post originale dei ShadowBrokers https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows : contiene exploit, implant e paylo...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

DEBIAN-CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner E aí, esse é um script Python multi-thread foda do keklick1337 pra caçar domínios vulneráveis ao CVE-2025-30208 no Vite. Basicamente, ele verifica se você pode pegar arquivos aleatórios via o endpoint @fs com ?raw?? ou ?import&raw?? — tipo vazamento de /etc/passwd e...

cve-2016-20012

CVE-2016-20012 Script de Enumeração de Nomes de Usuário SSH Este script Python tenta enumerar nomes de usuário válidos em um servidor SSH, tentando conectar com uma senha inválida. Ele mede o tempo de resposta para cada nome de usuário para identificar possíveis contas válidas com base no...

Whisper_Bully

Whisper Bully Strumento di ricerca per Estrazione BDADDR Bluetooth, Denial-of-Service e Hijack © 2026 @Ymsniper — Solo per ricerca di sicurezza autorizzata. Panoramica Whisper Bully è uno strumento di ricerca sulla sicurezza Bluetooth in tre fasi che prende di mira i dispositivi che pubblicizzano...

CVE-2020-16270

CVE-2020-16270 Descrição sugerida : OLIMPOKS versões anteriores a 3.3.39 permite XSS em Auth/Admin ErrorMessage. Um atacante remoto pode usar a vulnerabilidade descoberta para injetar payload JavaScript malicioso nos navegadores das vítimas no contexto de aplicações vulneráveis. O código executad...

cve-2020-10977-read-and-execute

CVE-2020-10977 lesen und ausführen Über CVE-2020-10977 HackerOne-Bericht: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 Wie man den Ausführungsteil manuell reproduziert: Vom Lesen zur Ausführung Über dieses Repository getsecret.py - Hauptskript. Es...

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache CVE-2024-12008 уязвимость разглашения информации в W3 Total Cache...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 шаблоны nuclei Описание Minio — это фреймворк для многоклаудного объектного хранения. В кластерном развёртывании, начиная с RELEASE.2019-12-17T23-16-33Z и до RELEASE.2023-03-20T20-16-18Z, MinIO возвращает все переменные окружения, включая MINIOSECRETKEY и...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 Un problème dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permet à un attaquant distant d'obtenir des informations sensibles via le paramètre cookies CVE-2024-42658 : Résumé : Une vulnérabilité dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Beschreibung Dieses Skript automatisiert die Ausnutzung von CVE-2024-24919 Checkpoint Security Gateway – Unerlaubte Offenlegung von Informationen. 📌 Funktionen ✅ Testen einzelner und mehrerer URLs ✅ Automatisierte Ausnutzung ✅ Einfach & Schnell 🛠️ Verwendung Klonen Sie diese...