CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2025-62341

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

OpenStack Keystone before 29.0.3 is vulnerable to a broken access control flaw in list_role_assignments_for_tree, caused by misuse of "None" in the policy domain_id check. Because a domain's project record stores domain_id=null, any authenticated user holding role:reader on any project can pass a...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit 概述 此仓库包含针对 CVE-2024-24919 的 Python 漏洞利用代码，该漏洞允许您从存在漏洞的页面读取敏感文件。 此漏洞利用首先检查目标是否易受攻击，然后获取您指定的路径。 严重程度 : 严重 用法 首先克隆仓库： root@kitploit: git clone https://github.com/Rug4lo/CVE-2024-24919-Exploit cd CVE-2024-24919-Exploit 赋予权限并使用 python3 执行漏洞利用 root@kitploit: chmod +x exploit.py...

CVE-2025-69428

Avviso di Sicurezza - CVE-2025-69428 Titolo: Accesso Non Autenticato a Directory Sensibile Divulgazione di Informazioni ID CVE: CVE-2025-69428 Descrizione Una vulnerabilità critica di controllo degli accessi nell'applicazione Pro-Bit distribuita localmente nelle versioni precedenti alla v1.77.4...

internal-security-detect

Rilevamento della Sicurezza Interna tramite Safebase I portali SafeBase esposti servono due tipi di pubblico contemporaneamente: i potenziali clienti che necessitano di prove della tua postura di sicurezza e i ricercatori di sicurezza blue team e red team. Ogni spunta verde rivela un controllo ch...

AlienTec-Recon-Tool

AlienTec 👽 Recon-Tool ❤️ Deine Unterstützung macht einen Unterschied Danke, dass du das AlienTec Recon-Tool verwendest! Dies ist ein Herzensprojekt und wird immer als kostenlose Open-Source-Version verfügbar sein. Deine Unterstützung hilft, die Entwicklung der geplanten Pro-Version zu beschleunige...

CVE-2026-61617

creationtimestamp| type| source ---|---|--- 2026-08-26 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzgrrh5tj26 2026-08-27 00:07:53+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtzkkcu5sd23...

CVE-2025-55183

CVE-2025-55183 Scanner per la vulnerabilità di esposizione del codice sorgente delle React Server Functions. Cos'è? CVE-2025-55183: Le Server Actions di React 19.0.0-19.2.1 possono essere sfruttate per esporre il loro codice sorgente completo, inclusi segreti hardcoded, chiavi API e credenziali d...

CVE-2023-23752

जूमला! सूचना प्रकटीकरण - CVE-2023-23752 शोषण CVE-2023-23752 के लिए शोषण 4.0.0 = जूमला = 4.2.7. उपयोग प्रोजेक्ट का उपयोग करने से पहले हमें आवश्यक पैकेज स्थापित करने की आवश्यकता होगी मैं पहले एक वर्चुअल वातावरण बनाने की सलाह देता हूं root@kitploit: pip install -r requierements.txt अवधारणा का प्रमाण...

CVE-2014-0160

💔 CVE-2014-0160 — "Heartbleed" 📖 目录 概述 技术背景 根本原因 影响范围 受影响版本 利用概述 缓解与补丁 时间线 经验教训 总结 🔎 概述 Heartbleed 是 CVE-2014-0160 的俗称，是 OpenSSL 的 TLS 心跳扩展中的一个严重漏洞。 它允许远程攻击者无需认证即可从易受攻击的服务器每次请求读取最多 64 KB 的内存 。 这泄露了以下敏感信息： 🔐 私有 SSL 密钥 👤 用户凭证 🍪 会话 Cookie 📧 电子邮件 💳 内存中存储的敏感数据 🧠 技术背景 OpenSSL 实现了 TLS 协议，用于保护 HTTPS 连接。...

CVE-2025-48734

CVE-2025-48734: Apache Commons BeanUtils – Information Leak di declaringClass degli enum e catena RCE Solo per scopi educativi e ricerche di sicurezza autorizzate. Questo repository fornisce un ambiente di laboratorio controllato per riprodurre la vulnerabilità CVE-2025-48734 in Apache Commons...

CVE-2018-15473

CVE-2018-15473 - Exploit di enumerazione degli username SSH Uno strumento per enumerare gli username validi su server SSH vulnerabili OpenSSH 2.3 fino alla 7.7. 📋 Descrizione della vulnerabilità La CVE-2018-15473 consente l'enumerazione degli utenti esistenti sui server SSH inviando pacchetti di...

CVE-2025-32432

Conjunto de Ferramentas de Exploração CraftCMS CVE-2025-32432 Ferramenta de exploração de execução remota de código no CraftCMS baseada na pesquisa do SensePost. 📁 Descrição dos Arquivos 🎯 Ferramentas Principais 1. finalpoc.py - POC final otimizado Suporta divulgação de informações e execução...

CVE-2026-21810

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...

CVE-2026-21809

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...

CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF)

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

CVE-2025-62341

HCL Connections contains a server-side request forgery (SSRF) vulnerability that becomes exploitable when an internal server is compromised. In certain scenarios, an attacker can send unauthorized requests, potentially leading to information disclosure or security bypass . The CVSS 3.1 base score...