CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Script de ejecución remota de comandos Para más archivos de script, ver también: https://github.com/zhzyker/exphub Léeme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

Taipan

Taipan 现已成为赞助项目。 社区赞助商将获得最新版 Taipan Community Edition 的使用权限。免费版本将在发布日三个月后发布。 了解更多信息，请访问：https://github.com/enkomio-sponsor/info 或 https://taipansec.com。 最新社区版下载 日期| 版本 ---|--- 2021-01-28| 2.9.498.18 -= 以下内容可能已过时 =- Taipan - Web 应用程序漏洞扫描器 Taipan 是一款自动化 Web 应用程序漏洞扫描器，能够以自动化的方式识别 Web 漏洞。 专业版 专业版...

GHSA-CXVF-GVFQ-36W2 Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

Summary Semaphore resolves a project member's effective permissions in ProjectMiddleware by looking up a role row whose slug matches the member's assigned role, and overwrites the built-in permission bitmask with that row's value. A member holding the built-in manager role creates a custom projec...

EUVD-2024-55573

LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache, leading to code execution...

CVE-2024-53326

CVE-2024-53326 affects LINQPad before 5.52.01 Pro. The vulnerability is an unsafe deserialization in LINQPad.AutoRefManager::PopulateFromCache(), which leads to code execution. The connected sources confirm the same description across EUVD-2024-55573 and NVD/CVE records. Public exploitation detai...

OpenKM 6.3.12 - Multiple

Exploit Title: OpenKM Multiple Critical Zero-Day Date: 17 Jan 2026 Exploit Author: Terra System Labs Pvt. Ltd. Vendor Homepage: https://www.openkm.com/ Software Link: https://hub.docker.com/r/openkm/openkm-ce Version: OpenKM Community Edition 6.3.12 and OpenKM Pro Edition 7.1.47 and previous...

Missing Authorization

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Missing Authorization via the actionSavePermissions process. An attacker can remove all group memberships from arbitrary users by submitting an empty groups parameter, resulting in immediate...

Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action

Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...

GHSA-JQ2F-59PJ-P3M3 Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action

Summary The actionSavePermissions endpoint allows a user with only viewUsers permission to remove arbitrary users from all user groups. While saveUserGroups enforces per-group authorization for additions, it performs no equivalent authorization check for removals, so submitting an empty groups...

EUVD-2026-20408

Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Precious Metals Automated Product Pricing Pro: from n/a...

CVE-2025-13668

A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...

CVE-2025-13668 Quartus Prime Pro Edition Advisory

A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...

CVE-2025-13668

Quartus Prime Pro Edition Design Software is cited as potentially allowing privilege escalation. The connected sources consistently reference Quartus Prime Pro Edition Design Software, but none of the provided documents specify affected versions, exact root cause, or a remediation. Public_DETAIL ...

CVE-2025-13668 Quartus Prime Pro Edition Advisory

A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege...

EUVD-2020-5917

Malware in sbrugna...

EUVD-2005-3996

Malware in sbrugna...

EUVD-2020-5918

Malware in sbrugna...

EUVD-2022-37172

Malicious code in bioql PyPI...

EUVD-2023-28496

Malicious code in bioql PyPI...

CVE-2024-21777

Uncontrolled search path in some IntelR QuartusR Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access...