87 matches found
CVE-2020-10204
CVE-2020-10204 CVE-2020-10204 Script de ejecución remota de comandos Para más archivos de script, ver también: https://github.com/zhzyker/exphub Léeme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...
Taipan
Taipan 现已成为赞助项目。 社区赞助商将获得最新版 Taipan Community Edition 的使用权限。免费版本将在发布日三个月后发布。 了解更多信息，请访问：https://github.com/enkomio-sponsor/info 或 https://taipansec.com。 最新社区版下载 日期| 版本 ---|--- 2021-01-28| 2.9.498.18 -= 以下内容可能已过时 =- Taipan - Web 应用程序漏洞扫描器 Taipan 是一款自动化 Web 应用程序漏洞扫描器，能够以自动化的方式识别 Web 漏洞。 专业版 专业版...
GHSA-CXVF-GVFQ-36W2 Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision
Summary Semaphore resolves a project member's effective permissions in ProjectMiddleware by looking up a role row whose slug matches the member's assigned role, and overwrites the built-in permission bitmask with that row's value. A member holding the built-in manager role creates a custom projec...
EUVD-2024-55573
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache, leading to code execution...
CVE-2024-53326
LINQPad Pro edition versions prior to 5.52.01 are vulnerable to Unsafe Deserialization within the LINQPad.AutoRefManager::PopulateFromCache() function. This flaw allows an attacker to achieve remote code execution by overwriting cache files containing serialized .NET objects with malicious payloa...
OpenKM 6.3.12 - Multiple
Exploit Title: OpenKM Multiple Critical Zero-Day Date: 17 Jan 2026 Exploit Author: Terra System Labs Pvt. Ltd. Vendor Homepage: https://www.openkm.com/ Software Link: https://hub.docker.com/r/openkm/openkm-ce Version: OpenKM Community Edition 6.3.12 and OpenKM Pro Edition 7.1.47 and previous...
Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action
Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...
Missing Authorization
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization via the actionSavePermissions process. An attacker can remove all group memberships from arbitrary users by submitting an empty groups parameter, resulting in immediate...
GHSA-JQ2F-59PJ-P3M3 Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action
Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...
EUVD-2026-20408
Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Precious Metals Automated Product Pricing Pro: from n/a...
CVE-2025-13668
A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...
CVE-2025-13668
Quartus Prime Pro Edition Design Software is cited as potentially allowing privilege escalation. The connected sources consistently reference Quartus Prime Pro Edition Design Software, but none of the provided documents specify affected versions, exact root cause, or a remediation. Public_DETAIL ...
CVE-2025-13668 Quartus Prime Pro Edition Advisory
A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...
CVE-2025-13668 Quartus Prime Pro Edition Advisory
A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...
CVE-2025-13668: Uncontrolled Search Path Element
A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...
EUVD-2020-5917
Malware in sbrugna...
EUVD-2005-3996
Malware in sbrugna...
EUVD-2020-5918
Malware in sbrugna...