CVE-2026-95655 Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel

Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated users to access arbitrary messages. Attackers can submit sequential message IDs to read, edit, delete, or pin messages from other departments or companies, and enumerate all notes ...

CVE-2026-95655

Aureus ERP before 1.5.0 contains an IDOR vulnerability in the ChatterPanel Livewire component (Webkul Chatter plugin). Message lookups are not scoped to the current record, allowing any authenticated user to submit sequential message IDs and read, edit, delete, or pin messages belonging to other ...

CVE-2018-10933

CVE-2018-10933 - libssh Authentication Bypass Proof-of-Concept implementation for CVE-2018-10933 , a critical authentication bypass vulnerability affecting the server-side implementation of libssh. Disclaimer This repository is provided solely for educational purposes, vulnerability research, and...

CVE-2026-57850

Summary RustDesk sessions are authorized for a specific connection type — Remote full desktop control, FileTransfer, PortForward, ViewCamera, or Terminal. Before 1.4.9, the server's post-authorization message gate only checked one boolean, self.authorized, and never re-checked it against the...

POC-CVE-2018-4327-and-CVE-2018-4330

brokentooth POC for CVE-2018-4327 atleast I think so since CVE-2018-4327 and CVE-2018-4330 were both written about by @SparkZheng but it does not say which once relates to which bug but since he described this one first then I'm taking a guess. Tested on iPhone 6S 11.3.1 Should work until 11.4...

Erlang-OTP-SSH-CVE-2025-32433

✅ Result The server responded to an SSH message ID 80 0x50 — which is reserved for post-auth. This proves the server accepts invalid messages during the pre-auth phase, indicating vulnerable behavior as defined in CVE-2025-32433. 📖 Research Summary I built this lab after studying Erlang/OTP and t...

CVE-2026-8239

CVE-2026-8239 CVE-2026-8239 es una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR que afecta a Concrete CMS 9.5.0 y anteriores.La vulnerabilidad existe en el endpoint /ccm/frontend/conversations/getrating, que permite a un atacante determinar si existe un mensaje de conversación y...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm is a WordPress plugin that makes it easy to create forms via drag and drop. During a recent engagement I happened to test some portals, one of which hosted a contact form created with this plugin. The custom...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – Desbordamiento de pila en odhcpd ⚠️ Solo con fines educativos y pruebas autorizadas. El uso no autorizado es ilegal. 📖 Resumen de la vulnerabilidad CVE-2026-53921 es un desbordamiento de búfer en la pila crítico en el daemon odhcpd de OpenWrt, el servidor DHCPv6/DHCPv4/RA...

kcatcher

Catch what's lurking in your Kafka clusters. Introduction Kcatcher is a command-line utility for enumerating and evaluating Kafka cluster configurations. It connects to Apache Kafka clusters and retrieves detailed information about brokers, topics, ACLs, and even samples messages. Perfect for...

CVE-2020-15392

CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...

CVE-2026-54992-PoC

CVE-2026-54992 PoC Prueba de concepto para el desbordamiento de enteros de lectura remota de Microsoft Message Queuing registrado como CVE-2026-54992. El PoC utiliza dos máquinas virtuales de Windows. Un usuario normal en el objetivo vulnerable solicita al servicio MSMQ local que lea de una cola...

CVE-2022-25813

CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz By inserting malicious content in a message’s “Subject” field, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ开发者指南 这个开发者指南是帮助您快速了解,并使用 Apache RocketMQ 1. 概念和特性 概念Concept：介绍RocketMQ的基本概念模型。 特性Features：介绍RocketMQ实现的功能特性。 2. 架构设计 架构Architecture：介绍RocketMQ部署架构和技术架构。 设计Design：介绍RocketMQ关键机制的设计原理，主要包括消息存储、通信机制、消息过滤、负载均衡、事务消息等。 3. 样例 样例Example...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mutt (UTSA-2023-002883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002883 advisory. Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 1.5.2 2.2.12 Tenable has extracted the preceding description block...

CVE-2026-95655: Authorization Bypass Through User-Controlled Key

Aureus ERP before 1.5.0 fails to scope message lookups to the current record in ChatterPanel, allowing authenticated users to access arbitrary messages. Attackers can submit sequential message IDs to read, edit, delete, or pin messages from other departments or companies, and enumerate all notes ...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

CVE-2026-59310

CVE-2026-59310 More root@kitploit: echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 root@kitploit: GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...

CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs Inbound Message-Attribute Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

No title provided

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...