zoneminder_CVE-2023-26035

Exploit - ZoneMinder CVE-2023-26035 There is a Unauthenticated Remote Code Execution RCE affecting ZoneMinder Snapshots. This is an exploit for CVE-2023-26035. Affected versions ZoneMinder 1.36.33 and ZoneMinder 1.37.33. Usage Check if the target is vulnerable: python3 zoneminder.py http://target...

CVE-2019-15043

CVE-2019-15043 POC Description Proof of concept scan to check if a Grafana server is vulnerable to CVE-2019-15043. Checks the Grafana server version number and checks to see if the snapshot API allows for unauthenticated requests. CVE-2019-15043 CVE-2019-15043 is a Denial-of-service vulnerability...

ir-rescue

ir-rescue ir-rescue consta de dos scripts hermanos que recopilan una gran cantidad de datos forenses de sistemas Windows de 32 y 64 bits ir-rescue-win y de sistemas Unix ir-rescue-nix. Los scripts respetan el orden de volatilidad y los artefactos que se modifican con la ejecución p. ej. , archivo...

ReconCat

Recon Cat ========================================= Introducción Una pequeña aplicación PHP para obtener instantáneas de URL de archivo de archive.org. usándola puedes obtener una lista completa de URLs de instantáneas de cualquier año o la lista completa de todos los años posibles. Hecha...

dufflebag

Dufflebag Dufflebag es una herramienta que busca secretos que puedan haber quedado accidentalmente en instantáneas públicas de Elastic Block Storage EBS. ¡Te sorprenderá la cantidad de contraseñas y secretos que simplemente están por ahí! La herramienta está organizada como una aplicación de...

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Non autenticato Installazione Scarica la repo $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Configurazione Nota: installa l'ultima versione di node $ npm init $ npm i axios cheerio yargs Utilizzo...

Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...

CVE-2026-105816

Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...

PT-2026-106498

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the smb3 enum snapshots function. When snapshot array size is smaller than GMT TOKEN SIZE, the function sets ret data len to the size of struct smb snapsh...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320

BuildKit is vulnerable to a flaw where it may be tricked into performing file actions using special file inodes instead of the expected regular files. This behavior can lead to blocked operations or, in environments with rootful workers , potentially allow unintended host device access . No speci...

Astra Linux – Vulnerability in libvirt

A flaw was discovered in libvirt. External inactive snapshots of shut-down virtual machines are created as being accessible to everyone on the network, allowing unprivileged users to inspect the contents of the guest operating systems. This leads to an information disclosure vulnerability...

zoneminder-snapshots-rce-poc

Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...

CVE-2026-103534

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

CVE-2026-103534

The David-Crty databasement software (versions up to 1.7.1 ) contains a vulnerability in the Snapshot Model component. Specifically, the SnapshotPolicy.viewAny/SnapshotPolicy.view functions within the /api/v1/snapshots file suffer from improper access controls . This flaw allows for remote exploi...

PT-2026-105797

Impact For views that opt into state snapshots, the snapshot state json embedded in the client page was restored on reconnect as trusted view state with no integrity check. A client could edit the unsigned state json in their page and return it in the reconnect mount frame to inject arbitrary vie...

CVE-2026-103534: Improper Access Control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possibl...

CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...