EUVD-2026-66403

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

EUVD-2026-66391

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66360

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

EUVD-2026-66393

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66392

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66383

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...

EUVD-2026-66364

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...

EUVD-2026-66384

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

CVE-2025-27817

Dichiarazione di non responsabilità: Le vulnerabilità descritte in questo documento e le relative procedure di riproduzione sono fornite esclusivamente a scopo di ricerca sulla sicurezza informatica e formazione. Nessuno può utilizzare le informazioni qui contenute per scopi illegali o per test s...

CVE-2025-49132-PoC

CVE-2025-49132 PoC di Pwndalf Panoramica Questo repository contiene un Proof of Concept PoC per CVE-2025-49132, una vulnerabilità di Remote Code Execution RCE che interessa Pterodactyl Panel 1.11.11 Questo PoC è stato sviluppato e testato in un ambiente di laboratorio controllato per scopi di...

nate158g-m-w-n-l-p-d-a-o-e

nate158g-m-w-n-l-p-d-a-o-e Questo modulo richiede Metasploit: https://metasploit.com/download Sorgente corrente: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress Popular Posts Authenticated RCE', 'Description' = %q This exploit requires Metasploit to have a FQDN an...

cve-2026-13934

CVE-2026-13934 Questo è il repository del progetto di lavoro. Indagini, analisi, attività e report vengono gestiti in un unico repo D088/D091. Questo file è il documento di ingresso per repo e board. Per il testo completo delle convenzioni su cartelle e artefatti, consulta docs/conventions.md. Il...

boa-cve-2009-4496-analysis

CVE-2009-4496 — Analisi Difensiva della Vulnerabilità Panoramica Questo repository documenta un'analisi difensiva di CVE-2009-4496 , una vulnerabilità storica associata al web server Boa. L'obiettivo di questo progetto è esaminare la vulnerabilità da una prospettiva di sicurezza difensiva...

CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server intestazione @ non attendibile → spoofing dei metadati interni CVSS 10.0 Critico · CWE-20 · GHSA-jrh6-9hgv-mqm7 Riepilogo Apache Traffic Server riserva le intestazioni con prefisso @ @Ats-Internal, @ICAP-Status, @TCPInfo, ... per i metadati interni : risiedo...

CVE-2026-65891

CVE-2026-65891 — Joomla JCE Rename PoC Scanner proof-of-concept per CVE-2026-65891 nell'estensione Joomla Content Editor JCE. La convalida inadeguata dell'input nella funzione rename del file manager JCE consente a un utente autenticato con permessi di gestione file di: creare file nascosti nomi...

GHSA-X8MJ-6P3Q-G5PP free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2026-55068

free5GC (open-source 5G core network) version 4.2.2 and earlier is vulnerable to NF Registration Poisoning in the NRF component. The RegisterNFInstance handler (PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID}) accepts NF profile bodies without enforcing 3GPP TS 29.510 constraints for UUID format, nf...