1322 matches found
CVE-2024-3183-POC
CVE-2024-3183-POC إثبات مفهوم لـ CVE-2024-3183 FreeIPA Rosting التأثير: يمكن لمستخدم ذي صلاحيات منخفضة الحصول على تجزئة hash لكلمات مرور جميع مستخدمي المجال وتنفيذ هجوم قوة عمياء غير متصل kerberoasting. تصحيح impacket-getTGT: 1. أضف decoder.decode.defaultErrorState = stGetValueDecoderByTag إلى...
CVE-2024-22120-RCE-with-gopher
الاستخدام root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime سيناريو مثال لقد حددت خادم Zabbix يعمل على العنوان IP 192.168.1.100، ولديك وصول إلى مستخدم منخفض الامتياز بالتفاصيل التالية: معرف الجلسة sid: d82bf6715e1d3c1f25 معرف المضيف hostid: 10107 معرف جلسة PH...
W&B Weave Server - Remote Arbitrary File Leak
The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...
EUVD-2026-71445
An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to write arbitrary content to files within /uxx/config/ and /ugw/config/...
EUVD-2026-66332
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...
CVE-2026-85226 MISP OnDemand Correlation Engine Missing Access Control Allows Disclosure of Restricted Correlations
MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, sharing group, organization, or other access-control restrictions associated with the correlated attributes and events...
CVE-2026-5173
🦊 CVE-2026-5173: إثبات مفهوم PoC لتنفيذ أساليب غير مصرّح بها عبر WebSocket في GitLab 🛠️ نظرة عامة تسمح CVE-2026-5173 لمهاجم مصادق بصلاحيات منخفضة باستدعاء أساليب خلفية مقيدة عبر نقطة نهاية WebSocket الخاصة بـ GitLab /-/cable، وتحديدًا عبر GraphqlChannel. يمكن أن يؤدي ذلك إلى كشف بيانات حساسة سرية...
CVE-2026-78590
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding Fleet Settings write access could cause a subsequent...
CVE-2026-78590 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding Fleet Settings write access could cause a subsequent...
CVE-2026-78590 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding Fleet Settings write access could cause a subsequent...
EUVD-2026-70061
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding Fleet Settings write access could cause a subsequent...
Kibana 8.19.18, 9.3.6, 9.4.3 Security Update (ESA-2026-158)
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of privileged...
CVE-2026-73751
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...
CVE-2026-73753
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2026-73753 Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface
Exploitation through affected command-line operations could allow an authenticated low-privileged user to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2026-34213
CVE-2026-34213 एक कम-विशेषाधिकार प्राप्त Docmost उपयोगकर्ता किसी पीड़ित के attachmentId को सामान्य अपलोड एंडपॉइंट पर प्रदान कर सकता था और उसी कार्यक्षेत्र में किसी अन्य पृष्ठ के संग्रहीत अनुलग्नक को अधिलेखित कर सकता था। परिचय मैंने Docmost , ओपन-सोर्स सहयोगी दस्तावेज़ीकरण प्लेटफ़ॉर्म में एक...
Linux Distros Unpatched Vulnerability : CVE-2026-58301
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connectio...
CVE-2026-82634
Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint (file: print_format_generator.py). Low-privileged users with print permission on any document can supply raw Jinja template strings, enabling arbitrary SELECT statements against unrelated table...
EUVD-2026-66771
LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...