cve-2018-15133

POC - CVE-2018-15133 Usage: $ ./CVE-2018-15133 -h Usage: ./CVE-2018-15133 options Options: -APIKEY string API key del sitio web de Laravel, codificada en base64 -URL string URL del sitio web de Laravel a atacar -command string Comando a ejecutar en el sitio web vulnerable; si no se especifica, se...

CVE-2026-93528

📌 CVE-2026-93528: Unauthenticated Order Data Disclosure in NP Quote Request for WooCommerce • Vulnerability Type: Sensitive Data Disclosure CWE-200 • Affected Software: woo-rfq-for-woocommerce 2.4.16 • Original Researcher: Murad Islamzada • Vendor: Neah Plugins Cyrus 1. Overview & Root Cause The...

CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...

IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository G — Detect

Fingerprint / reachability check for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import Path root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for IPConfigure Orchid VMS — Authenticated Command Injection in the DNF Repository GPG-Key Import...

IPConfigure Orchid DNF GPG key rpm --import injection RCE

Authenticated PUT /service/server/properties taints package.dnf.repo.gpgkey; restart runs unquoted rpm --import as root OOB / blind. """IPConfigure Orchid DNF repo GPG key injection root RCE.""" from future import annotations import base64 import json import time from urllib.parse import urlencod...

poc-dsa-verify-CVE-2019-17596

Exploiting dsa.Verify in Go CVE-2019-17596 Please see the associated blog post for details. Running Since versions of Go newer than 1.13.1 are patched, I;ve included a Dockerfile, that makes it easier to pin your Go version. Simply run Docker build: docker build . There are two files of interest:...

EUVD-2026-110854

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7...

RAMnesia-Attack

This research presents a comprehensive analysis of two critical classes of attacks on the hardware memory of modern computer systems using DDR5 memory: Phoenix Rowhammer Attack CVE-2025-6202 and RAMnesia Attack CVE-2023-39910 . Both attacks demonstrate fundamental vulnerabilities in the processin...

CVE-2026-115408

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKAID/CKALABEL and never verify it against the private key. In...

EUVD-2026-110816

In github.com/eclipse-keypont/crypto11/v2 versions = 2.0.0-rc3, = 2.0.0-rc8, the ML-KEM key-pair lookup functions FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes locate the public half of an ML-KEM key pair by CKAID/CKALABEL and never verify it against the private key. In...

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone. A buyer wh...

terrapod-PoC

Terrapod: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-6qrc-597p-mrp9. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-terrapod-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440...

CVE-2026-11109-Bluetooth-Classic-KNOB-Attack-Key-Negotiation-of-Bluetooth-

CVE-2026-11109 – Bluetooth Classic KNOB Attack Key Negotiation of Bluetooth Program Code Python Simulated knobattacksim.py - Simulates negotiation of encryption key size to 1 byte import random, hashlib class BluetoothDevice: def negotiatekeysizeself, proposedsize: Vulnerable: accepts any key siz...

CVE-2026-116894

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user's session id or stay-logged-in cookie can keep backend...

ssh_Enum_vaild

sshEnumvaild A Bash script to enumerate valid SSH usernames using the CVE-2018-15473 vulnerability. It checks for valid usernames on an OpenSSH server by analyzing authentication responses. Features ✅ Detects valid SSH usernames based on OpenSSH response behavior ✅ Uses a public key authenticatio...

EUVD-2026-110790

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user's session id or stay-logged-in cookie can keep backend...

CVE-2026-116894

REDAXO versions prior to 5.21.5 are susceptible to an insufficient session expiration vulnerability. If an attacker obtains a user's session ID or stay-logged-in cookie , they can maintain backend access for up to three months even after the user changes their password. The vulnerability persists...

CVE-2026-116894 REDAXO before 5.21.5 Insufficient Session Expiration on Password Change

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user's session id or stay-logged-in cookie can keep backend...

CVE-2026-116894 REDAXO before 5.21.5 Insufficient Session Expiration on Password Change

REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user's session id or stay-logged-in cookie can keep backend...

CVE-2019-5420

CVE-2019-5420 Ruby-on-Rails offers three different environments it can run in: development, test and production. You should obviously not have code running in development or test available on the internet but it as always happens for example in staging environments. Ruby-on-Rails uses...