165 matches found
CVE-2022-45047
CVE-2022-45047 POC,EXP,chatGPT per me codice root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding"...
Cisco-IOS-XE-CVE-2023-20198
Cisco-IOS-XE-CVE-2023-20198 Exploit PoC für CVE-2023-20198 Sicherheitslückeninformationen und Nutzung des Exploits bereitgestellt von smokeintheshell Siehe Referenzen Endpunkt, HTTP-Content-Typ und Header-Management wurden gegenüber anderen bestehenden PoCs modifiziert, um in Situationen zu...
CVE-2025-49493
Exploit XXE di Akamai CloudTest CVE-2025-49493 Panoramica Questo è un exploit basato su Python per CVE-2025-49493 , che colpisce le versioni di Akamai CloudTest precedenti alla 60 2025.06.02 12988. La vulnerabilità consente l'iniezione di XML External Entity XXE tramite l'endpoint del servizio...
EUVD-2026-61618
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Report...
CVE-2026-9152
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
CVE-2026-9152
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
CVE-2026-9152
The CVE-2026-9152 entry concerns Altium 365 SearchService with an unauthenticated legacy SOAP endpoint that exposes search index operations. The root cause is lack of authentication/identity verification, enabling an unauthenticated attacker who knows a workspace identifier to access and manipula...
CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...
CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP 1208. The ReadLicense action’s LFName accepts unsanitized file paths, enabling crafted SOAP requests with UNC paths to trigger outbound SMB connections and leak NTLMv2 machi...
CVE-2026-39907 Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...
EUVD-2021-18884
Malware in sbrugna...
EUVD-2017-6753
Malware in sbrugna...
EUVD-2023-45706
Malicious code in bioql PyPI...
EUVD-2023-48743
Malicious code in bioql PyPI...
EUVD-2023-45708
Malicious code in bioql PyPI...
EUVD-2023-48025
Malicious code in bioql PyPI...
EUVD-2023-45720
Malicious code in bioql PyPI...
EUVD-2023-48746
Malicious code in bioql PyPI...