NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Modulo Metasploit Modulo Metasploit per InfoBlox Network Automation: iniezione di comandi del sistema operativo Prodotto: Network Automation root@kitploit: NetMRI Switch Port Manager Automation Change Manager Security Device Controller Fornitore: root@kitploit: InfoBlox...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

dirtyCow

Dirtycow, noto anche come CVE-2016-5195, è una vulnerabilità molto popolare del passato. Per prima cosa scegli la versione di Linux adatta a questa vulnerabilità. Poi installala o eseguila su VBOX o VMWare. Dopo averla installata, segui queste istruzioni: 1. Crea un utente senza accesso root. 2...

CVE-2026-0770

CVE-2026-0770: Langflow execglobals Unauthentifizierte Remote-Codeausführung PoC CVE-2026-0770 ist eine Schwachstelle für nicht authentifizierte Remote-Codeausführung RCE, die Langflow betrifft. Der Fehler beruht auf einer unzureichenden Eingabevalidierung bei der Verarbeitung des Parameters...

polkadots

polkadots CVE-2021-3560 Lokaler PrivEsc-Exploit Dieser Exploit erstellt einen neuen privilegierten Benutzer, mit dem Sie zu Root wechseln können. Betroffene Distributionen: RHEL 8 Fedora 21 Debian testing Bullseye Ubuntu 20.04 Verwendung root@kitploit: ./polkadots -a Konto -n Kontoname -h...

CVE-2024-22274

CVE-2024-22274: Esecuzione remota di codice autenticata in VMware vCenter Server Il server vCenter contiene una vulnerabilità di esecuzione remota di codice autenticata. Un attore malintenzionato con privilegi amministrativi sulla shell dell'appliance vCenter potrebbe sfruttare questo problema pe...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation Basato su CVE-2021-4034 è stato potenziato: l'esecuzione dell'Exploit aggiungerà per impostazione predefinita il nome utente rooter, la password Hello@World, e l'utente rooter avrà privilegi sudo. Fare riferimento a...

VMware VRealize Network Insight - Remote Code Execution

VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2026-75855

ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoint's create database and drop database commands, allowing authenticated root users to write and delete arbitrary files outside the configured database directory. Attackers can supply database names...

New API: User List API Leaks Root User Access Token Leading to Privilege Escalation

Vulnerability Information - Product: new-api - Affected versions: versions before v1.0.0-rc.7 that serialize User.AccessToken as accesstoken; the issue was confirmed in v0.12.14 - Patched version: v1.0.0-rc.7 - Fixed commit: 0936e2504655a5cbf7bc3c388f6d3e2bb24916d3 - Type: Information Disclosure ...

GHSA-6X2C-PHFF-WX57 New API: User List API Leaks Root User Access Token Leading to Privilege Escalation

Vulnerability Information - Product: new-api - Affected versions: versions before v1.0.0-rc.7 that serialize User.AccessToken as accesstoken; the issue was confirmed in v0.12.14 - Patched version: v1.0.0-rc.7 - Fixed commit: 0936e2504655a5cbf7bc3c388f6d3e2bb24916d3 - Type: Information Disclosure ...

CVE-2026-64859

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as accesstoken because User model objects are serialized after queries use...

CVE-2026-64859

In new-api before v1.0.0-rc.7, the User model's AccessToken field was serialized as "access_token" in JSON responses to admin-only endpoints (GET /api/user/ and user lookup). An authenticated admin could retrieve the root user's bearer token and impersonate root, bypassing role boundaries to acce...

CVE-2026-64859 New API: User List API Leaks Root User Access Token Leading to Privilege Escalation

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as accesstoken because User model objects are serialized after queries use...

CVE-2026-64859

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as accesstoken because User model objects are serialized after queries use...

GO-2023-1683 vulnerabilities

Vulnerabilities for packages: ctop, podman...

CVE-2026-18713 IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

CVE-2026-18683 IBM i is Affected By privilege escalation in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...

PT-2026-71169

IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i. An authenticated user could elevate privileges to a root user to execute commands...