CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-66153

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths...

CVE-2026-66153

CVE-2026-66153 is a Link Following (CWE-59) vulnerability in the NEService auto-upgrade process of the SonicWall NetExtender Linux client . The process insecurely handles temporary files, allowing a local attacker with low privileges to manipulate file paths. The CVSS 3.0 score is 7.0 (HIGH) with...

Dolibarr-17.0.0-Exploit-CVE-2023-30253

Readme.md CVE-2023-30253 CVE-2023-30253 è una falla di sicurezza nel software Dolibarr che consente agli utenti autenticati di eseguire codice in remoto sfruttando una tecnica di manipolazione delle maiuscole nei dati iniettati. Impatto Questa vulnerabilità può portare a un'esecuzione remota di...

CVE-2025-29927-POC

CVE-2025-29927-POC مقدمة يحتوي هذا المستودع على إثبات مفهوم PoC للثغرة CVE-2025-29927، وهي ثغرة افتراضية توضح خللاً في معالجة الوسيطة middleware داخل تطبيق ويب. يوضح PoC كيف يمكن لطلب HTTP مصمم خصيصًا تجاوز منطق إعادة التوجيه للوصول إلى محتوى مقيد، مثل لوحة التحكم. هذا المشروع مخصص للأغراض...

scapy

Scapy Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to...

arp-dns-attacks

ARP-DNS attacks Using PCAP library in Linux for Windows, it would be Winpcap 1. The two attacks demonstrated here can be used to poison a victim's ARP cache with which we can sniff/manipulate the packets transmitted between the victim and the local gateway. Please note that these attacks are mean...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft servers. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8 , players could take items such as barrier blocks or duplicate items from the search GUI, representing an integrity issue with a CVSS 4.0 base score of 5.3 (Medium) . The...

CVE-2026-55624 MintyItanium Lost-Auction takes items like barrier blocks out from search GUI

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

CVE-2021-25735

CVE-2021-25735 Exploit CVE-2021-25735: Bypass del Webhook di Convalida dell'Ammissione di Kubernetes Imposta l'ambiente vulnerabile Iniziamo eseguendo lo script gencerts.sh per generare certificati TLS e chiavi. bash gencerts.sh Per distribuire il controller di ammissione è necessario creare...

CVE-2026-79406

macrozheng mall (open-source e-commerce platform) versions up to 1.0.3 contain a business logic error in the function OmsCartItemServiceImpl.updateQuantity , accessible via the endpoint /cart/update/quantity . Manipulating the quantity argument allows a remote, authenticated attacker to trigger l...

EUVD-2026-65486

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 Questo è un programma Java che sfrutta la vulnerabilità Spring Break CVE-2017-8046. Questo software è scritto per avere il minor numero possibile di dipendenze esterne. DISCLAIMER Questo strumento è destinato a ingegneri della sicurezza e specialisti appsec per valutazio...

FLUIG-Vulnerabilidade-CVE-2023-6275

FLUIG-Vulnerabilità-CVE-2023-6275 24 nov 2023 — È stata trovata una vulnerabilità nella piattaforma TOTVS Fluig 1.6.x/1.7.x/1.8.0/1.8.1. È stata valutata come problematica. https://nvd.nist.gov/vuln/detail/CVE-2023-6275 CVE-2023-6275 - Cross-Site Scripting riflesso nella piattaforma TOTVS Fluig...

CVE-2024-23747

CVE-2024-23747 Il sistema di gestione ospedaliera ModernaNet 2024 di Moderna Sistemas è suscettibile a una vulnerabilità di Insecure Direct Object Reference IDOR. PoC Questa vulnerabilità risiede nella gestione dell'accesso ai dati utente da parte del sistema tramite un URL...

Stompy

Stompy Eine PowerShell-Funktion zum Durchführen von Timestomping auf angegebenen Dateien und Verzeichnissen. Die Funktion kann Zeitstempel rekursiv für alle Dateien in einem Verzeichnis ändern. Zeitstempel für einzelne Dateien oder Verzeichnisse ändern. Zeitstempel rekursiv auf alle Dateien in...

CVE-2024-8349-and-CVE-2024-8350

CVE-2024-8349 und CVE-2024-8350 Hintergrundinformationen Uncanny Groups for LearnDash uncanny-learndash-group ist ein Drittanbieter-Plugin für LearnDash LMS sfwd-lms. Das Plugin ermöglicht es Gruppenleitern einer benutzerdefinierten LearnDash-Rolle, Benutzer ihrer eigenen LearnDash-Gruppen über d...

CVE-2019-19633

CVE-2019-19633 lib/G/functions.php no Chevereto 1.0.0 até 1.1.4 Free, e até 3.13.5 Core, permite que um atacante realize ataques de força bruta sem acionar o mecanismo de proteção implementado, manipulando o cabeçalho X-Forwarded-For na requisição. O IP no cabeçalho deve ser alterado a cada 25ª...

CVE-2024-48990-PoC

CVE-2024-48990-PoC Was ist needrestart und wie funktioniert es? Needrestart ist ein weit verbreitetes Dienstprogramm auf Linux-Systemen standardmäßig auf vielen Ubuntu-Versionen, das nach einem Software-Update überprüft, ob ein Dienst oder das System selbst neu gestartet werden muss. Durch die...