ROOT-APP-NPM-CVE-2026-42043 CVE-2026-42043 in axios - Patched by Root

Root has patched CVE-2026-42043 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42035 CVE-2026-42035 in axios - Patched by Root

Root has patched CVE-2026-42035 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42037 CVE-2026-42037 in axios - Patched by Root

Root has patched CVE-2026-42037 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42039 CVE-2026-42039 in axios - Patched by Root

Root has patched CVE-2026-42039 in the axios package for Root:npm. Multiple fixed versions available...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

WordPress Mobile Events Manager plugin <= 1.4.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile Events Manager versions = 1.4.8.3...

WordPress Quads Ads Manager for Google AdSense plugin 3.0.4 - Subscriber+ Ad-Selling Payment Bypass vulnerability

Subscriber+ Ad-Selling Payment Bypass vulnerability discovered by JunHee CHO in WordPress Plugin Ads by WPQuads versions 3.0.4...

CVE-2026-18366

CVE-2026-18366 — Events Manager 7.4.1：未认证权限提升至管理员 | ---|--- 产品| Events Manager（WordPress 插件） 受影响版本| 7.1.0 – 7.4.0.x 修复版本| 7.4.1 弱点| CWE-269：权限管理不当 严重性| CVSS 3.1：9.8（严重） — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H WPVDB ID| 82767ce2-01e4-46ad-a52b-72d3ab2049bd 原始研究人员| Jakub Herman 分析文章与 PoC| ghostpel...

pmp-exploit

pmp-exploit 该漏洞利用工具利用了 Password Manager Pro 中存在的权限提升漏洞，可将普通用户提升为 SuperAdmin，然后下载存储在应用程序中的密码和文件。 受影响系统 root@kitploit: 产品 : ManageEngine Password Manager Pro 公司 : ZOHO Corp. 内部版本号 : 8.1 及可能更早的版本 受影响版本 : 8102 及可能更早的版本 用法 要正确执行，需要使用以下语法。 root@kitploit: pmp-getthemall.py -u -p...

Oracle-Identity-Manager-CVE-2025-61757

Oracle Identity Manager CVE-2025-61757 漏洞检测工具 v2.2 🔥 漏洞背景 近日，Oracle Identity Manager 曝出严重远程代码执行漏洞（CVE-2025-61757），该漏洞由于 SecurityFilter 对请求URI处理不当，攻击者可通过添加 ;.wadl 参数绕过身份验证，进而利用Groovy脚本在处理器编译时执行任意代码，最终获取服务器权限。 漏洞危害： CVSS 3.1评分：9.8（高危） 影响范围：全球数千台服务器 利用难度：低 危害程度：极高 🛡️ 工具介绍 为应对这一紧急安全威胁，开发了专用于检测...

JavaPayload

JavaPayload JavaPayload es una colección de payloads Java puros para usar en la post-explotación desde exploits Java puros o desde configuraciones incorrectas comunes como el administrador de Tomcat sin protección por contraseña o el puerto del depurador. La documentación desactualizada se puede...

CVE-2024-30051

CVE-2024-30051 — EoP por desbordamiento de heap del DWM de Windows · Investigación de Tesis de Máster -orange Desbordamiento de búfer basado en heap en el Administrador de ventanas de escritorio de Windows dwmcore.dll Escalada de privilegios local → nivel de integridad SYSTEM a través del proceso...

CVE-2025-56399

CVE-2025-56399 – laravel-file-manager v3.3.1 における認証されたリモートコード実行 🧭 概要 laravel-file-manager v3.3.1 以下における認証されたリモートコード実行（RCE）の脆弱性により、ファイルマネージャーインターフェースにアクセスできる攻撃者が、サーバー上で任意のコードを実行できます。許可された非PHP拡張子（例: .png, .pdf）のファイルに悪意のあるPHPコードを含めてアップロードし、そのファイル名を .php 拡張子に変更するか、または直接 .php...

IBM Data Risk Manager - Authentication Bypass via SAML

IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication bypass when configured with SAML authentication. A remote attacker can bypass security restrictions by sending a specially crafted HTTP request to the SAML idpSelection endpoint, allowing them to bypass the...

HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass

HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22 contains an authentication bypass vulnerability which could be remotely exploited to bypass remote authentication and possibly lead to execution of arbitrary commands, gaining...

Micro Focus UCMDB - Remote Code Execution

Micro Focus UCMDB is susceptible to remote code execution. Impacted products include Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions, and Operations Bridge containerized 2020.05, 2019.08, 2019.0...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-远程代码执行漏洞利用 我发现的被分配为 CVE-2026-47301 的概念验证漏洞利用链，针对 Microsoft Configuration Manager SCCM，结合了访问控制缺陷、CAB 解压路径遍历任意文件写入、证书验证绕过以及 DLL 劫持，以实现 SYSTEM 级别的代码执行。 如何使用？ 此漏洞利用使用专门为滥用此 CVE 而构造的恶意 cab 文件，我为此 POC 提供了一个 cab 文件。 该漏洞利用将通过将两个 DLL 植入到从预期路径到 Configuration Manager \bin\X64 安装目录的...

CVE-2026-40000

CVE-2026-40000 A poc for CVE-2026-40000, a vulnerability in ZTE File Manager zte.com.cn.filer which allows to read arbitrary files from other apps as the privileges of this file manager How to: build the project or get the app from releases, install and open the poc, then input a file to open and...

PT-2026-91003

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt parse element of the file scene manager/loader xmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

CVE-2026-89472

In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs chargermanagerremove and the errregextcon probe error path free each charger regulator with regulatorput before tearing down the powersupply sysfs entries...