CVE-2023-23752

CVE-2023-23752 यह CVE-2023-23752 भेद्यता के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट कोड है। यह एक हमलावर को लक्ष्य एप्लिकेशन से उपयोगकर्ता नाम, पासवर्ड और डेटाबेस नाम जैसी संवेदनशील जानकारी निकालने की अनुमति देता है। बल्क स्कैनर + कॉन्फ़िग प्राप्त करें + CVE-2023-23752 से IP लक्ष्य स्क्रीनशॉट इंस्टॉलेशन इस...

CVE-2023-36645

== Logiciel concerné %hardbreaks Fournisseur : ITB-GmbH Produits concernés : TradePro v9.5 Composant : Fonction Customer ; Action oordershow Confirmé : oui == Vecteur d'attaque %hardbreaks Type : SQLi Type d'accès : À distance Impact : Divulgation d'informations ; Élévation de privilèges...

CVE-2021-22555-Poc

CVE لتجاوز سعة الكومة CVE-2021-22555 قائمة الأخطاء كتابة خارج الحدود في الكومة الخطأ الأساسي فساد البيانات التأثير المباشر تسرب الذاكرة / كشف المعلومات تصعيد الامتيازات الهدف النهائي 1. ثبّت أدوات الترجمة لا تقم بتشغيل apt upgrade تحميل iso wget...

CVE-2021-46702

CVE-2021-46702 Descrizione: Tor Browser 9.0.7 su Windows 10 build 10586 è vulnerabile alla divulgazione di informazioni. Ciò potrebbe consentire ad attaccanti locali di bypassare la funzione di anonimato prevista e ottenere informazioni riguardanti i servizi onion visitati da un utente locale...

log4shell

Log4Shell Questo progetto è una dimostrazione del funzionamento della vulnerabilità di sicurezza log4shell. Questa vulnerabilità è descritta nella CVE-2021-44228. Il progetto è destinato esclusivamente a scopo didattico. Deve essere utilizzato solo sul proprio sistema e solo per fini sperimentali...

CVE-2026-20805-POC

CVE-2026-20805 PoC Prova di concetto per la vulnerabilità di divulgazione di informazioni in Desktop Windows Manager dwm.exe di Microsoft. 📋 Riepilogo della Vulnerabilità ID: CVE-2026-20805 Prodotto: Microsoft Windows Componente: Desktop Windows Manager dwm.exe CWE-ID: CWE-200 Exposure of Sensiti...

CVE-2025-60188-Atarim-Plugin-Exploit

CVE-2025-60188-Atarim-Plugin-Exploit CVE-2025-60188: تجاوز المصادقة في إضافة Atarim عبر تزوير HMAC نظرة عامة يحتوي هذا المستودع على إثبات المفهوم PoC وتحليل فني للثغرة CVE-2025-60188، وهي ثغرة حرجة تم اكتشافها في إضافة Atarim الخاصة بووردبريس. تسمح هذه الثغرة للمستخدمين غير المصادق عليهم بتجاوز...

CVE-2026-74747

creationtimestamp| type| source ---|---|--- 2026-08-27 01:43:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117164934142622275...

CVE-2025-14847

CVE-2025-14847 Ambiente de vulnerabilidade CVE-2025-14847 com um PoC https://jira.mongodb.org/browse/SERVER-115508 RESUMO Esta é uma correção crítica para abordar CVE-2025-14847. Atualize para 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32 ou 4.4.30. DESCRIÇÃO DO PROBLEMA E IMPACTO Uma exploração no lado ...

EQGRP_Lost_in_Translation

EQGRP Lost in Translation Contenuto decriptato di odd.tar.xz.gpg, swift.tar.xz.gpg e windows.tar.xz.gpg Scaricato da https://yadi.sk/d/NJqzpqo3GxZA4 Post originale dei ShadowBrokers https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation windows : contiene exploit, implant e paylo...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

DEBIAN-CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-80183

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner E aí, esse é um script Python multi-thread foda do keklick1337 pra caçar domínios vulneráveis ao CVE-2025-30208 no Vite. Basicamente, ele verifica se você pode pegar arquivos aleatórios via o endpoint @fs com ?raw?? ou ?import&raw?? — tipo vazamento de /etc/passwd e...

Whisper_Bully

Whisper Bully Strumento di ricerca per Estrazione BDADDR Bluetooth, Denial-of-Service e Hijack © 2026 @Ymsniper — Solo per ricerca di sicurezza autorizzata. Panoramica Whisper Bully è uno strumento di ricerca sulla sicurezza Bluetooth in tre fasi che prende di mira i dispositivi che pubblicizzano...

cve-2020-10977-read-and-execute

CVE-2020-10977 lesen und ausführen Über CVE-2020-10977 HackerOne-Bericht: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 Wie man den Ausführungsteil manuell reproduziert: Vom Lesen zur Ausführung Über dieses Repository getsecret.py - Hauptskript. Es...

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache

CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache CVE-2024-12008 уязвимость разглашения информации в W3 Total Cache...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 шаблоны nuclei Описание Minio — это фреймворк для многоклаудного объектного хранения. В кластерном развёртывании, начиная с RELEASE.2019-12-17T23-16-33Z и до RELEASE.2023-03-20T20-16-18Z, MinIO возвращает все переменные окружения, включая MINIOSECRETKEY и...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 Un problème dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0 permet à un attaquant distant d'obtenir des informations sensibles via le paramètre cookies CVE-2024-42658 : Résumé : Une vulnérabilité dans le routeur Wi-Fi wishnet Nepstech NTPL-XPON1GFEVN v1.0...

EUVD-2026-66815

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...