EUVD-2026-92295

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Summary A vulnerability in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code using standard browser developer tools to...

KUMO-Domain-Recon-Tool

Дайте Kumo домен — и он за один проход соберёт всё, что о нём можно узнать: DNS и защиту электронной почты , сертификаты и поддомены из CT-логов, открытые порты , отпечатки технологий , утекшие учётные данные и заражения инфостилерами, облачные бакеты и 358 проверок уязвимостей на известные...

macchanger

GNU MAC Changer GNU MAC Changer — это утилита, которая упрощает манипуляцию MAC-адресами сетевых интерфейсов. Веб-сайт: http://www.gnu.org/software/macchanger Репозиторий: http://github.com/alobbs/macchanger Всего наилучшего, Alvaro Lopez Ortega [email protected]...

CVE-2016-3962-Exploit

CVE-2016-3962, CVE-2016-3989 POC Exploit This is a proof of concept exploit for version V5.30p of the web configuration interface for Meinberg NTP Time Server. This exploit also utilitizes CVE-2016-3989 to escalate to the root user. More details about the vulnerabilities can be found at:...

CVE-2026-29519-Lucee-Reflected-XSS

CVE-2026-29519-Lucee-Reflected-XSS Доказательство концепции для отражённого XSS в Lucee CFML CVE-2026-29519 0-Day во фреймворке: отражённый XSS при разборе URL в Lucee CFML затрагивает корпоративные развёртывания версии с 5.3.1.95 по 7.x Обнаружил: Fouad Milat lavado Дата обнаружения: 6 декабря...

CVE-2025-14340

XSS до захвата учетной записи администратора CVE-2025-14340 Уязвимость межсайтового скриптинга XSS в интерфейсе управления REST Payara позволяет выполнять JavaScript, контролируемый злоумышленником, что приводит к захвату учетной записи администратора. Это происходит из-за: 1. Панель использует...

CVE-2025-24016

CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...

CVE-2020-17530-s2-061

CVE-2020-17530-s2-061 expérience d'interface graphique pour s2-061, seulement pour le fun et la pratique Utilisation python CVE-2020-17530.py Remplir l'adresse cible Remplir la commande système à exécuter Cliquer sur Exécuter PS : La fonction de reverse shell est intégrée dans l'exp, mais je n'ai...

[SECURITY] Fedora 43 Update: cri-o1.36-1.36.6-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.36-1.36.6-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2018-0296

CVE-2018-0296 Test CVE-2018-0296 and extract usernames from Cisco ASA. Refer to https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/ for more technical details. Help Menu $ ./CVE-2018-0296 -h Options: -h, --help display help information -u, --url Url ...

EUVD-2026-92784

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

Cisco ASA Improper Input Validation (CVE-2020-3304)

A vulnerability in the web interface of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is...

Cisco ASA Unrestricted Upload of File with Dangerous Type (CVE-2020-3436)

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to upload arbitrary-sized files to specific folders on an affected device, which could lead to an unexpected devic...

PT-2026-104751

Name of the Vulnerable Software and Affected Versions Perforce P4 Search versions prior to 2026.4.2 Description Perforce P4 Search enables an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, which...

VulnCheck KEV: CVE-2026-95675

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

CVE-2026-78862

An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...

CVE-2026-78862

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2026-105220

A flaw was found in Twine. The application fails to properly sanitize markup during story import, allowing embedded malicious scripts to execute within the editor interface. By convincing a user to import a specially crafted story file, an attacker can leverage an internal inter-process...