CVE-2018-0114-Exploit

CVE-2018-0114-Exploit Una vulnerabilità nella libreria open source node-jose di Cisco, precedente alla versione 0.11.0, potrebbe consentire a un attaccante remoto non autenticato di ri-firmare token utilizzando una chiave incorporata nel token. La vulnerabilità è dovuta al fatto che node-jose seg...

cve-2022-30190

cve-2022-30190 Correzione di CVE-2022-30190 tramite rimozione di ms-msdt dal registro di Windows Risorse Guida e soluzione alternativa di Microsoft Valutazione di Palo Alto...

CVE-2022-40769

CVE-2022-40769 profanity fino alla versione 1.60 ha solo quattro miliardi di possibili inizializzazioni RNG. Pertanto, gli attaccanti possono recuperare le chiavi private dagli indirizzi vanity di Ethereum e rubare criptovaluta, come sfruttato in the wild a giugno 2022. autenticazione| complessit...

CVE_2021_27850_POC

Utilizzo dei comandi root@kitploit: git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command Supponendo che l...

CVE-2024-45337-POC

CVE-2024-45337-POC Proof of Concept POC für CVE-2024-45337 Build root@kitploit: go version go version go1.23.2 linux/amd64 go build Verwendung root@kitploit: Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey tha...

VULNERABLE-CVE-2024-45337

VULNERABLE-CVE-2024-45337 Un progetto di esempio che mostra codice golang vulnerabile a CVE-2024-45337. Questo è un progetto complementare a: https://github.com/NHAS/CVE-2024-45337-POC Così hai qualcosa da sfruttare. Utilizzo root@kitploit: go run solver.go -authorised-pubkey ided25519.pub -allow...

EUVD-2026-66404

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

CVE-2026-77557

CVE-2026-77557 is a critical (CVSS 9.8) Improper Access Control vulnerability in UniFi Protect AI Key . A malicious actor with network access can exploit it to escalate privileges on the device, with no prior authentication required (PR:N). The attack vector is network-based with low complexity, ...

CVE-2026-80204 Grav before 1.0.18 Authentication Bypass via Scoped API Key

The Grav API plugin getgrav/grav-plugin-api before 1.0.18 does not apply the API-key scope cap in the injectSecurityTab function of BlueprintController when deciding whether a page's security/permissions blueprint section is editable. Because the function performs raw isSuperAdmin/hasPermission...

CVE-2026-80204

CVE-2026-80204 affects the Grav API plugin (getgrav/grav-plugin-api) before 1.0.18 . The root cause lies in the injectSecurityTab() function of BlueprintController, which performs raw isSuperAdmin()/hasPermission() checks without a request parameter, preventing enforcement of scopeAllows(). As a ...

EUVD-2026-66395

The Grav API plugin getgrav/grav-plugin-api before 1.0.18 does not apply the API-key scope cap in the injectSecurityTab function of BlueprintController when deciding whether a page's security/permissions blueprint section is editable. Because the function performs raw isSuperAdmin/hasPermission...

EUVD-2026-66394

The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the requireNotSuperTarget function in UsersController.php across seven sensitive user-management endpoints. The check uses isSuperAdmin on the acting account rather than verifying whether the specific API key carri...

CVE-2026-80203

The getgrav/grav-plugin-api plugin before 1.0.18 contains an authentication bypass in the requireNotSuperTarget() function within UsersControllers.php, affecting seven sensitive user-management endpoints. The root cause is that the scope check calls isSuperAdmin() on the acting account rather tha...

CVE-2021-40444

CVE-2021-40444 CVE-2021-40444 POC -----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu0enjPUx4R0+zWyY4FEI 0LUeiAJecPz6iDPdMRiIQHBPZBxKH7A+losAu7DB9IoY1GnGvFJzA1G4UkK6n/rg 2r65Ym3SloHoov/IxC2qcyz1UBftD0HBR8KE9Yy84k1sYIdNzKeWPQETY9UqEEy/...

WordPress MalCare WordPress Security plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability

Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin MalCare Security versions 5.16-6.62...

WordPress BlogVault Backup & Staging plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability

Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin BlogVault versions 5.16-6.62...

WordPress The WP Remote WordPress plugin 5.16-6.62 - Unauthenticated Site Takeover via Connection Key Recovery vulnerability

Unauthenticated Site Takeover via Connection Key Recovery vulnerability discovered by Jakub Herman in WordPress Plugin The WP Remote WordPress Plugin versions 5.16-6.62...

CVE-2026-19197

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

Alibab-Nacos-Unauthorized-Reset-PWD

Auswirkungen der Schwachstelle In Nacos wurde eine Schwachstelle entdeckt, die Nacos = 2.2.0 betrifft. Wenn ein Benutzer den standardmäßigen JWT-Schlüssel verwendet, kann ein Angreifer das Passwort eines beliebigen Benutzers zurücksetzen und das Benutzerkonto übernehmen. Betroffenes Produkt...

RAMnesia-Attack

Questa ricerca presenta un'analisi completa di due classi critiche di attacchi alla memoria hardware dei moderni sistemi informatici che utilizzano memoria DDR5: Phoenix Rowhammer Attack CVE-2025-6202 e Attacco RAMnesia CVE-2023-39910 . Entrambi gli attacchi dimostrano vulnerabilità fondamentali...