CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – CrushFTP 身份验证绕过 🔎 概述 CVE-2025-2825 是一个影响 CrushFTP 的严重身份验证绕过漏洞，CrushFTP 是一款广泛使用的安全文件传输服务器。该漏洞允许远程攻击者通过伪造标头绕过登录身份验证并获得管理员访问权限——诱骗服务器认为请求来自 localhost。 严重性： 严重 CVSS 评分： 9.8 攻击向量： 远程 受影响版本： CrushFTP v10.6.0 修复版本： v10.6.0 及以上 状态： 正被野外积极利用 🧠 技术细节 该漏洞源于对 X-Forwarded-For 标头的验证不当。当此标头设置为...

CVE-2016-6210-Exploit

Esta es la primera versión del exploit "armado" para CVE-2016-6210 Antecedentes: Publicado por Eddie Harari en Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 Resumen breve: Al enviar contraseñas grandes, un usuario remoto puede enumerar usuarios en un sistema que ejecuta SSHD. Est...

CVE-2026-66046

A flaw was found in the Expat XML parsing library. A remote, unauthenticated attacker can supply a specially crafted XML document to trigger quadratic algorithmic complexity in the storeAtts function, causing excessive CPU consumption and a denial of service Mitigation To mitigate, avoid parsing...

CVE-2025-0282

PoC para CVE-2025-0282 Un desbordamiento de búfer remoto no autenticado basado en pila que afecta a Ivanti Connect Secure, Ivanti Policy Secure y las puertas de enlace Ivanti Neurons para ZTA Resumen Este es un exploit de prueba de concepto para demostrar la explotación de CVE-2025-0282, y se bas...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fixed a heap overflow in the NFSv4.0 LOCK replay cache. The NFSv4.0 replay cache uses a fixed 112-byte inline buffer rpibufNFSD4REPLAYISIZE to store encoded operation responses. This size was calculated based on OPEN...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

CVE-2018-15473

CVE-2018-15473 SSH-用户名-枚举-漏洞利用（OpenSSH 2.3 7.7） 原始漏洞利用的编辑版本：https://www.exploit-db.com/exploits/45233 转换为 Python3 添加了用户名字典选项 如何运行 root@kitploit: 安装依赖： foo@bar:$ pip3 install -r requirements.txt root@kitploit: 针对单个用户名： foo@bar:$ ./Exploit.py 192.168.1.20 -u root + root 是一个有效用户名 root@kitploit:...

Linux Distros Unpatched Vulnerability : CVE-2026-89679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix null dereference in nfsd4setattr for deleg timestamp attrs When a SETATTR request includes FATTR4WORD2TIMEDELEGACCESS or FATTR4WORD2TIMEDELEGMODIFY in...

Security Bulletin: IBM Sterling File Gateway is Vulnerable to Improper Access Control (CVE-2026-19290)

Summary IBM Sterling File Gateway has addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-19290 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information due to improper access control. CWE:CWE-284: Improper Access Control CVSS...

EUVD-2026-76185

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote unauthenticated attackers to cause a denial of service or potentially execute arbitrary cod...

CVE-2026-85228

An integer overflow in the tensor buffer validation component of Amazon Deep Java Library (DJL) versions 0.13.0 through 0.36.0 (all platforms) allows a remote unauthenticated actor to read information from adjacent process memory or trigger a denial of service by submitting a crafted tensor paylo...

cve-2026-86060

CVE-2026-86060 — Escalada de privilegios preautenticación en SSH de MikroTik RouterOS hasta el control administrativo total...

apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...

CVE-2026-41940

⚠️ CVE-2026-41940 - Omisión de autenticación en cPanel & WHM Omisión crítica de autenticación previa en cPanel & WHM 📌 Resumen CVE-2026-41940 es una vulnerabilidad crítica de omisión de autenticación que afecta a cPanel & WHM y WP Squared. Un atacante remoto no autenticado puede omitir por complet...

Exploit for CVE-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Priv...

CVE-2026-24061

Bypass de Autenticación en GNU InetUtils telnetd mediante Inyección de Argumentos - CVE-2026-24061 📚 Introducción Una vulnerabilidad de inyección de argumentos recientemente identificada en telnetd de GNU InetUtils permite a los atacantes eludir la autenticación estableciendo la variable de entor...

CVE-2020-4463

IBM Maximo Asset Management 存在通过 XXE 漏洞导致的信息泄露 CVE-2020-4463 IBM Maximo Asset Management 在处理 XML 数据时容易受到 XML 外部实体注入 XXE 攻击。远程攻击者可以利用此漏洞泄露敏感信息或消耗内存资源。 基础评分: 8.2 向量: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L 受影响的核心组件 IBM Maximo Asset Management 7.6.0 IBM Maximo Asset Management 7.6.1 IBM Maximo...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

cve-2020-9375

CVE-2020-9375 早于 Build 200318 Rel. 62209 的 TP-Link Archer C50 V3 设备允许远程攻击者通过包含意外 Referer 字段的特制 HTTP 标头造成拒绝服务。 漏洞利用标题 : TP-Link Archer C50 v3 拒绝服务 日期 : 25-01-2020 漏洞利用作者 : thewhiteh4t 厂商主页 : https://www.tp-link.com/ 版本 : TP-Link Archer C50 v3 Build 171227 测试环境 : Arch Linux x64 CVE : CVE-2020-9375 ...

CVE-2026-77465

A flaw was found in toml-node. A remote, unauthenticated attacker can exploit an uncontrolled recursion vulnerability in the TOML parser by crafting a malicious TOML document with deeply nested arrays or inline tables. This can lead to the exhaustion of the Node.js call stack, causing a RangeErro...