CVE-2026-74747

creationtimestamp| type| source ---|---|--- 2026-08-27 01:43:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117164934142622275...

CVE-2025-14847

CVE-2025-14847 Ambiente de vulnerabilidade CVE-2025-14847 com um PoC https://jira.mongodb.org/browse/SERVER-115508 RESUMO Esta é uma correção crítica para abordar CVE-2025-14847. Atualize para 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 ou 4.4.30. DESCRIÇÃO DO PROBLEMA E IMPACTO Uma exploração no lado ...

EQGRP_Lost_in_Translation

EQGRP Lost in Translation Contenuto decriptato di odd.tar.xz.gpg, swift.tar.xz.gpg e windows.tar.xz.gpg Scaricato da https://yadi.sk/d/NJqzpqo3GxZA4 Post originale dei ShadowBrokers https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows : contiene exploit, implant e paylo...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

DEBIAN-CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner E aí, esse é um script Python multi-thread foda do keklick1337 pra caçar domínios vulneráveis ao CVE-2025-30208 no Vite. Basicamente, ele verifica se você pode pegar arquivos aleatórios via o endpoint @fs com ?raw?? ou ?import&raw?? — tipo vazamento de /etc/passwd e...

cve-2016-20012

CVE-2016-20012 Script de Enumeração de Nomes de Usuário SSH Este script Python tenta enumerar nomes de usuário válidos em um servidor SSH, tentando conectar com uma senha inválida. Ele mede o tempo de resposta para cada nome de usuário para identificar possíveis contas válidas com base no...

Whisper_Bully

Whisper Bully Strumento di ricerca per Estrazione BDADDR Bluetooth, Denial-of-Service e Hijack © 2026 @Ymsniper — Solo per ricerca di sicurezza autorizzata. Panoramica Whisper Bully è uno strumento di ricerca sulla sicurezza Bluetooth in tre fasi che prende di mira i dispositivi che pubblicizzano...

CVE-2020-16270

CVE-2020-16270 Descrição sugerida : OLIMPOKS versões anteriores a 3.3.39 permite XSS em Auth/Admin ErrorMessage. Um atacante remoto pode usar a vulnerabilidade descoberta para injetar payload JavaScript malicioso nos navegadores das vítimas no contexto de aplicações vulneráveis. O código executad...

cve-2020-10977-read-and-execute

CVE-2020-10977 lesen und ausführen Über CVE-2020-10977 HackerOne-Bericht: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 Wie man den Ausführungsteil manuell reproduziert: Vom Lesen zur Ausführung Über dieses Repository getsecret.py - Hauptskript. Es...

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache CVE-2024-12008 уязвимость разглашения информации в W3 Total Cache...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 шаблоны nuclei Описание Minio — это фреймворк для многоклаудного объектного хранения. В кластерном развёртывании, начиная с RELEASE.2019-12-17T23-16-33Z и до RELEASE.2023-03-20T20-16-18Z, MinIO возвращает все переменные окружения, включая MINIOSECRETKEY и...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 Un problème dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permet à un attaquant distant d'obtenir des informations sensibles via le paramètre cookies CVE-2024-42658 : Résumé : Une vulnérabilité dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Beschreibung Dieses Skript automatisiert die Ausnutzung von CVE-2024-24919 Checkpoint Security Gateway – Unerlaubte Offenlegung von Informationen. 📌 Funktionen ✅ Testen einzelner und mehrerer URLs ✅ Automatisierte Ausnutzung ✅ Einfach & Schnell 🛠️ Verwendung Klonen Sie diese...

EUVD-2026-66815

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

EUVD-2026-66808

A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...

EUVD-2025-210804

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

EUVD-2026-66806

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

EUVD-2026-66803

The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project including database passwords, API keys, etc. by sending a TCP request without any credential...