29584 matches found
suds
OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...
CVE-2026-54121
🛡️ CVE-2026-54121 — Investigación CTI de Certighost Escalada de privilegios en Active Directory Certificate Services / Riesgo de compromiso del dominio Creado por Pratik Chhetri Fecha del informe: 2026-07-28 📌 Resumen ejecutivo...
CVE-2026-87821 Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can read internal HTTP services and cloud metadata including IA...
CVE-2019-0708
CVE-2019-0708 ¡La parte que causa el bloqueo BSOD se ha eliminado intencionalmente! Existe una vulnerabilidad de ejecución remota de código en Remote Desktop Services, anteriormente conocido como Terminal Services, cuando un atacante no autenticado se conecta al sistema de destino mediante RDP y...
CVE-2022-26923
CVE-2022-26923 説明 この脆弱性により、デフォルトのActive Directory環境でActive Directory Certificate Services(AD CS)サーバーの役割がインストールされている場合、低権限ユーザーが権限をドメイン管理者に昇格させることができました。 これは主にActive Directory Certificate Services(AD CS)の役割に関連しています。AD CSの役割はWindows Serverの役割であり、組織向けに公開鍵基盤(PKI)を構築し、公開鍵暗号、デジタル証明書、デジタル署名機能を提供できます。AD...
CVE-2026-19729 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters
A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...
CVE-2026-19729
CVE-2026-19729 is an incomplete fix for CVE-2026-9083 in the key provider component of the keycloak-services library (core engine of the Red Hat Build of Keycloak). A relative path traversal remains, allowing a realm administrator to submit arbitrary filesystem paths as keystore parameters and de...
skylift
SkyLift V0.4 Will be posted June 15 python3 click easier to use CLI parser workflow fix timestamp SkyLift V0.3 SkyLift is a low-cost geolocation spoofing device. It currently uses the ESP8266 to broadcast WiFi Beacon Frames to exploit a longstanding 2008 vulnerability in WiFi geolocation services...
poc_proxylogon
pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 Este script fue creado originalmente por celesian para explotar este CVE. Luego lo actualicé para explotar un servidor de Exchange vulnerable a SSRF, pero obtuve una shell explotando la función EWS, porque una empresa cliente parcheó ...
CVE-2019-0708
Existe una vulnerabilidad de ejecución remota de código en los Servicios de Escritorio Remoto, anteriormente conocidos como Servicios de Terminal, cuando un atacante no autenticado se conecta al sistema objetivo mediante RDP y envía solicitudes especialmente diseñadas. Esta vulnerabilidad es prev...
POC-2020-8558
Overview CVE-2020-8558 is a Kubernetes venerability which was published because kube-proxy unexpectedly makes localhost-bound host services available to others on the network. I place the emphasis on unexpectedly because this vulnerability is due to a design flaw oversight, not an implementation...
Security Advisory 0168
Security Advisory 0168 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-2380 CVSSv3.1 Base Score: 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVSSv4.0 Base Score: 5.1...
Microsoft-Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708
このリポジトリには README がありません。...
CVE-2026-80096
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-73012
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-72957
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
CVE-2026-72954
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-72943
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...