SploitScan

SploitScan 📜 Descrizione SploitScan è uno strumento potente e facile da usare progettato per semplificare il processo di identificazione degli exploit per vulnerabilità note e la relativa probabilità di sfruttamento. Potenzia i professionisti della cybersecurity con la capacità di identificare e...

nmap-CVE-2023-35078-Exploit

nmap-CVE-2023-35078-Exploit Script Nmap per sfruttare la vulnerabilità CVE-2023-35078 - Mobile Iron Core Salva lo script in un file chiamato nmap-CVE-2023-35078-Exploit.nse. Per eseguire lo script, puoi usare l'opzione --script-args di Nmap per fornire il percorso del file di output: nmap -p...

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 CVSS score: 9.8, a case of remote code execution that allows an...

PAN-OS Management Web Interface - Authentication Bypass

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

Qlik Sense Enterprise - Path Traversal

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection

Sunhillo SureLine 8.7.0.1.1 is vulnerable to OS command injection. The /cgi/networkDiag.cgi script directly incorporated user-controllable parameters within a shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. The following POST request...

D-Link DIR-605 - Information Disclosure

An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version - 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page id: CVE-2021-40655 info: name: D-Link DIR-605 - Information Disclosure author: DhiyaneshDK severity: high...

SugarCRM Unauthenticated - Remote Code Execution

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation. id: CVE-2023-22952 info: name: SugarCRM Unauthenticated - Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: high description: |...

Adobe ColdFusion - Local File Read

Unauthenticated Arbitrary File Read vulnerability due to deserialization of untrusted data in Adobe ColdFusion. The vulnerability affects ColdFusion 2021 Update 5 and earlier as well as ColdFusion 2018 Update 15 and earlier id: CVE-2023-26360 info: name: Adobe ColdFusion - Local File Read author:...

BillQuick Web Suite SQL Injection

BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xpcmdshell. id: CVE-2021-42258 info: name: BillQuick Web Suite SQL Injection...

GLPI <=10.0.2 - Remote Command Execution

GLPI through 10.0.2 is susceptible to remote command execution injection in /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module. id: CVE-2022-35914 info: name: GLPI =10.0.2 - Remote Command Execution author: For3stCo1d,allendemoura severity: critical description: | GLPI through 10.0...

Fuel CMS 1.4.7 - SQL Injection

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. id: CVE-2020-17463 info: name: Fuel CMS 1.4.7 - SQL Injection author: Thirukrishnan severity: critical description: | FUEL CMS 1.4.7 allows SQL Injection via the col parameter to...

CVE-2025-62593-PoC

CVE-2025-62593 — Esecuzione di codice remoto in Ray non autenticata Proof-of-concept per CVE-2025-62593 , una vulnerabilità di esecuzione di codice remoto non autenticata nel motore di calcolo AI distribuito Ray, sfruttata tramite attacchi di DNS-rebinding basati su browser. È stata aggiunta al...

CGA-7R46-5XW5-56Q2

Bulletin has no description...

Exploit-Mapper

Exploit Mapper Eine umfassende Plattform zur Verwaltung von Schwachstellen, die Sicherheits-Scan-Berichte analysiert, Schwachstellendaten mit Exploit-Informationen anreichert und umsetzbare Risikobewertungen für eine priorisierte Behebung bietet. Funktionen Multi-Format-Import : Unterstützung für...

CVE-2020-13671

CVE-2020-13671 RCE tramite caricamento di file — Drupal Core Software: Drupal Core 8.7.5 Versioni affette: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 Alto CWE: CWE-434 — Caricamento senza restrizioni di file con tipo pericoloso CISA KEV: Sì — Vulnerabilità nota e sfruttata Advisory:...

CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-

CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNUNG : Dieses Skript dient nur zu Bildungs- und Testzwecken in autorisierten Umgebungen. Die unbefugte Nutzung ist verboten und kann illegal sein. 📋 Beschreibung...

CVE-2025-48595-Android-Framework-Integer-Overflow-

CVE-2025-48595 - Vulnerabilità di Integer Overflow nel Framework Android Descrizione CVE-2025-48595 è una vulnerabilità di integer overflow in più punti del Framework Android. Questa falla consente l'esecuzione di codice che porta a una escalation locale dei privilegi senza la necessità di...

Primetek Primefaces 5.x - Remote Code Execution

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution. id: CVE-2017-1000486 info: name: Primetek Primefaces 5.x - Remote Code Execution author: Moritz Nentwig severity: critical description: Primetek Primefaces 5.x is vulnerable to a weak encryption fl...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via confmail.php. id: CVE-2022-29303 info: name: SolarView Compact 6.00 - OS Command Injection author: badboycxcc severity: critical description: | SolarView Compact 6.00 was discovered to contain a command injecti...