CVE-2019-19550

CVE-2019-19550 Beschreibung Die Umgehung der Remote-Authentifizierung in Senior Rubiweb 6.2.34.28 und 6.2.34.37 ermöglicht Admin-Zugriff auf vertrauliche Informationen betroffener Benutzer, die anfällige Versionen verwenden. Der Angreifer muss lediglich die korrekte URL angeben. Wichtige Daten...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Versão editada do exploit original: https://www.exploit-db.com/exploits/45233 Convertido para Python3 Adicionada opção de wordlist de nomes de usuário Como Executar root@kitploit: Install the requirements: foo@bar:$ pip3 install -r...

CVE-2025-0282

PoC para CVE-2025-0282 Um estouro de buffer baseado em pilha remoto não autenticado afetando Ivanti Connect Secure, Ivanti Policy Secure e Ivanti Neurons para gateways ZTA Visão Geral Este é um exploit de prova de conceito para demonstrar a exploração de CVE-2025-0282, e é baseado na estratégia d...

CVE-2020-4463

IBM Maximo Asset Management ist anfällig für Informationsoffenlegung durch XXE-Sicherheitslücke CVE-2020-4463 IBM Maximo Asset Management ist anfällig für einen XML-External-Entity-Injection-Angriff XXE bei der Verarbeitung von XML-Daten. Ein entfernter Angreifer könnte diese Sicherheitslücke...

CVE-2026-41940

⚠️ CVE-2026-41940 - Bypass de Autenticação do cPanel & WHM Bypass crítico de pré-autenticação no cPanel & WHM 📌 Visão Geral CVE-2026-41940 é uma vulnerabilidade crítica de bypass de autenticação que afeta cPanel & WHM e WP Squared. Um atacante remoto não autenticado pode contornar completamente o...

CVE-2016-6210-Exploit

Esta é a primeira versão do exploit "armamentado" para CVE-2016-6210 Contexto: Postado por Eddie Harari no Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 O resumo: Ao enviar senhas grandes, um usuário remoto pode enumerar usuários em um sistema que executa SSHD. Esse problema exis...

cve-2020-9375

CVE-2020-9375 TP-Link-Archer-C50-V3-Geräte vor Build 200318 Rel. 62209 ermöglichen es entfernten Angreifern, einen Denial of Service über einen manipulierten HTTP-Header mit einem unerwarteten Referer-Feld auszulösen. Exploit-Titel : TP-Link Archer C50 v3 Denial of Service Datum : 25-01-2020...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – CrushFTP Authentifizierungsumgehung 🔎 Überblick CVE-2025-2825 ist eine kritische Schwachstelle zur Authentifizierungsumgehung, die CrushFTP betrifft, einen weit verbreiteten sicheren Dateiübertragungsserver. Der Fehler ermöglicht es entfernten Angreifern, die...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

CVE-2026-65832

A flaw was found in Deskflow, a keyboard and mouse sharing application. A remote, unauthenticated Deskflow server can send specially crafted messages to a connected client, leading to an out-of-bounds read. This vulnerability could result in the disclosure of four bytes of memory at an...

CVE-2026-19446

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...

librenswan: IKEv2 Denial of Service via malformed fragmentation

A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...

CVE-2026-75514

In BunkerWeb versions prior to 1.6.13, the blacklist, greylist, and antibot modules in blacklist.lua, greylist.lua, and antibot.lua trust PTR suffix matches in IGNORE_RDNS, GREYLIST_RDNS, and ANTIBOT_IGNORE_RDNS without calling get_ips to verify the hostname resolves to the client IP. An attacker...

EUVD-2026-63168

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote attacker on an adjacent network can send ...

DEBIAN-CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-66046

Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...

CVE-2026-73523

COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The numcanms...

CVE-2026-73523

In COVESA Open1722 through 0.9.2, the num_can_msgs variable (declared uint8_t) in acf-can-listener.c truncates the -1 error return from avtp_to_can() to 255, causing a write loop to iterate 255 times over a 15-slot stack array and leak ~18 KB of adjacent stack memory as ~240 CAN frames to any bus...

CVE-2026-73522 COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener

COVESA Open1722 through 0.9.2 contains a stack buffer overflow vulnerability that allows unauthenticated remote attackers to write past the end of a fixed 15-slot stack array by sending a crafted UDP datagram containing more than 15 ACF-CAN messages. The avtptocan function increments its write...

Ivanti Endpoint Manager < 2024 SU7 Multiple Vulnerabilities

The version of Ivanti Endpoint Manager running on the remote host is prior to 2024 SU7. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent servic...