TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38409)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the delStaticDhcpRules function. Attackers can exploit this vulnerability by sending a specially crafted PO...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38413)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the delWiFiScheduleCfg function. Attackers can exploit this vulnerability by sending specially crafted POST request...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler 内存泄漏利用工具 !WARNING 此脚本仅用于教育及研究目的 。未经明确授权 ，请勿将其用于任何系统。未经授权的访问或测试是非法且不道德的行为。使用此脚本前，请阅读完整的免责声明。 概述 本项目演示了在 Citrix NetScaler 设备中发现的一个内存泄漏漏洞（CVE-2025-5777）。该漏洞源于在解析格式错误的 POST 数据（特别是 login 参数）时，对未初始化内存处理不当。由于它与臭名昭著的 CVE-2023-4966（原始 CitrixBleed）高度相似，该漏洞被广泛称为 CitrixBleed 2...

CVE-2026-83042

creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnkdqahp2g 2026-09-16 02:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm3sxp3u42y 2026-09-23 06:37:08+00:00| seen|...

CVE-2026-83037

creationtimestamp| type| source ---|---|--- 2026-09-15 22:14:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnjcph452j 2026-09-16 00:00:20+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvltgyvyop25 2026-09-23 09:48:49+00:00| seen|...

CVE-2026-83031

creationtimestamp| type| source ---|---|--- 2026-09-15 22:13:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnikmkba2b 2026-09-15 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlsuuari52t 2026-09-23 09:49:01+00:00| seen|...

CVE-2026-82998

creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlngbs75h2t 2026-09-15 23:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3mj4mn25 2026-09-23 09:50:06+00:00| seen|...

CVE-2026-82997

creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnfz37552j 2026-09-15 23:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlq3izjdq2y 2026-09-23 09:50:08+00:00| seen|...

CVE-2026-92000

creationtimestamp| type| source ---|---|--- 2026-09-15 22:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlmqp54zu2m...

CVE-2026-67340_exploit

CVE-2026-67340 — ArcadeDB RCE post-autenticación mediante script de disparador JAVASCRIPT Ejecución remota de código posterior a la autenticación en ArcadeDB una base de datos Java multimodelo mediante un disparador JAVASCRIPT que accede a clases del host. El motor políglota de GraalVM de un...

CVE-2026-54544

Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @loginrequired decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /api/test-webhook and cause the Fireshare...

CVE-2026-87287

creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljkoglcz2z...

CVE-2026-87286

creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljh2lpuk2b...

CVE-2026-88975

creationtimestamp| type| source ---|---|--- 2026-09-15 21:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljgt7w5m2s...

redis-post-exploitation

redis-post-exploitation 仅供教育用途 参考 https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf https://paper.seebug.org/975/ Rogue 服务器 https://github.com/knqyf263/redis-rogue-server 构建 root@kitploit: $ docker-compose build 运行 root@kitploit: $ docker-compose up -d $...

Log4jCenter

Log4jCenter Explotando CVE-2021-44228 en vCenter para ejecución remota de código y más. Artículo de blog detallando la explotación en el enlace de abajo: Cómo explotar vulnerabilidades Log4j en VMWare vCenter ¿Por qué? Las pruebas de concepto para esta vulnerabilidad están dispersas y deben...

CVE-2026-81925

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

CVE-2026-19885

creationtimestamp| type| source ---|---|--- 2026-09-15 20:13:27+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgrj64du2g...

CVE-2026-19781

creationtimestamp| type| source ---|---|--- 2026-09-15 20:13:25+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgrhiprk2z...

EUVD-2026-79939

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...