196229 matches found
CVE-2022-43369
Este repositorio no tiene un README...
cve-2024-21409-repro
Este repositorio no tiene un README...
CVE-2008-1611
Este repositorio no tiene un README...
Gozi
This repository does not have a README...
SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE
SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...
Vtiger CRM v7.2.0 - Directory Listing
Vtiger CRM v7.2.0 contains a directory traversal vulnerability caused by improper access controls in /libraries and /layout directories, letting attackers display hidden files and list directories, exploit requires no authentication. id: CVE-2020-19363 info: name: Vtiger CRM v7.2.0 - Directory...
Adobe Commerce/Magento - Customer Session Identity Switch
Adobe Commerce contains an incorrect authorization vulnerability caused by improper access control, letting attackers escalate privileges to access sensitive resources, exploit requires no user interaction. id: CVE-2026-71362 info: name: Adobe Commerce/Magento - Customer Session Identity Switch...
WordPress AI Engine Plugin - Token Exposure
Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...
Feast Feature Server <=0.58.0 - Arbitrary File Read
Feast the open-source Feature Store Feature Server through 0.58.0 exposes an unauthenticated POST /read-document endpoint that reads an arbitrary, caller-supplied file path with no authentication and no path validation. The readdocumentendpoint handler passes the JSON filepath field straight to...
Mongoose < 8.8.3 - Remote Code Execution
Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. id: CVE-2024-53900 info: name: Mongoose 8.8.3 - Remote Code Execution author: h4mg severity: critical description: | Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. impact...
ansible-playbook-cve-2024-3094
Este repositorio no tiene un README...
RPDscan
Herramientas Una colección de herramientas. Todas las herramientas deben usarse con precaución y no asumimos ninguna responsabilidad por los daños causados por su uso...
Honeypot_Smart_Infrastructure
Este repositorio no tiene un README...
CVE-2023-2024
Este repositorio no tiene un README...
CVE-2022-34298
Este repositorio no tiene un README...
WTSRM
WTSRM - Writing Tiny Small Reliable Malware demo repository for my corresponding talk. Unhooks all Windows Dlls with \KnownDlls\ No CRT dependencies Small size Low entropy Random string encryption key thus no plaintext strings API hashing Hook detection Walks around hooks for initial unhooking on...
Offensive_tools
This repository does not have a README...
CVE-2007-0038
Este repositorio no tiene un README...