SonLogger-vulns

CVE-2021-27964 | SonLogger - رفع ملف تعسفي غير مصادق عليه Metasploit التاريخ: 30-01-2021 مؤلف الاستغلال: Berkan Er [email protected] الصفحة الرئيسية للبائع: https://www.sonlogger.com/ رابط البرنامج: https://www.sonlogger.com/download الإصدار: 4.2.3.3 تم الاختبار على: Windows 10 Enterprise x6...

pmp-exploit

pmp-exploit यह एक्सप्लॉइट Password Manager Pro में पाई गई Privilege Escalation विशेषाधिकार वृद्धि भेद्यता का लाभ उठाता है, जिससे एक सामान्य उपयोगकर्ता को SuperAdmin तक उन्नत किया जा सकता है और फिर एप्लिकेशन में संग्रहीत पासवर्ड और फ़ाइलें डाउनलोड की जा सकती हैं। प्रभावित सिस्टम root@kitploit:...

CVE-2024-21754-Forti-RCE

FortiOS 및 FortiProxy 비밀번호 해싱 취약점으로 인한 RCE CVE-2024-21754 개요 FortiOS 및 FortiProxy 7.4.3, 7.2, 7.0, 6.4, 2.0 이하 버전에서 CVE-2024-21754로 분류된 심각한 취약점이 확인되었습니다. CWE-916으로 분류된 이 취약점은 충분하지 않은 연산 노력으로 생성된 비밀번호 해시를 사용하는 문제로, 슈퍼 관리자 프로필과 CLI 접근 권한을 가진 권한 있는 공격자가 백업 파일을 복호화할 수 있게 합니다. 세부 정보 CVE ID :...

CVE-2020-10130

CVE-2020-10130 - SearchBlox produit avant V-9.1 vulnérable à un contournement de logique métier Description du produit : SearchBlox simplifie la recherche en entreprise pour les organisations complexes. Les outils intuitifs et intelligents de SearchBlox offrent une configuration prête à l'emploi,...

CVE-2026-36102

Bluewave Labs Checkmate versions ≤ 3.3.0 contain a privilege escalation vulnerability in the inviteController.js component. A remote authenticated administrator can elevate their role to superadmin by manipulating the role parameter sent to the /api/v1/invite endpoint. The vulnerability is in the...

CVE-2026-6356

Augmentt: Escalation dei privilegi tramite manipolazione dei parametri Crediti Questa CVE è il risultato di uno sforzo collaborativo tra: HelloWorld Autore – GitHub: https://github.com/Penquinsecq Raznov – GitHub: https://github.com/basraznov Descrizione Una vulnerabilità nell'applicazione web...

CVE-2026-37071

CVE-2026-37071 Beliebige Dateiumbenennung führend zur Erhöhung von Berechtigungen in der Funktion Actions::renameFile im Veno File Manager Project 4.4.9 ermöglicht es einem authentifizierten Angreifer mit der Berechtigung 'reanme', das Superadministratorkonto zu übernehmen, indem er eine speziell...

CVE-2024-55591

CVE-2024-55591 PoC Questa repository contiene un PoC prova di concetto per CVE-2024-55591 , una vulnerabilità critica di bypass dell'autenticazione scoperta nei prodotti FortiOS e FortiProxy di Fortinet. Panoramica della vulnerabilità CVE-2024-55591 è una vulnerabilità di bypass dell'autenticazio...

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 è vulnerabile alla cancellazione arbitraria di file. Per sfruttare la vulnerabilità, un attaccante autenticato con il ruolo di superadmin può inviare una richiesta POST appositamente predisposta all'endpoint interessato utilizzando il parametro url...

CVE-2023-25355-25356

Exploit e crediti L'exploit è stato trovato da [email protected] ed è presentato in due fantastici lavori: articolo full disclosure slide DEFCON31 Un repository per automatizzare ulteriormente questa vulnerabilità è stato pubblicato da Alex Linov: https://github.com/AlexLinov/sipXcom-RCE...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC è una prova di concetto per la vulnerabilità CVE-2025-15602 in Snipe-IT. Uno script per elencare tutti gli utenti e uno script per impossessarsi di un account superadmin. Contesto Un utente ha solo il diritto di modificare gli utenti, può abusarne per elencar...

CVE-2026-50550

CVE-2026-50550 is a missing authorization vulnerability in Snipe-IT , an IT asset and license management system built on Laravel, affecting versions prior to 8.5.0 . The postTwoFactorReset() endpoint in app/Http/Controllers/Api/UsersController.php checks for general update access but fails to enf...

CVE-2026-50550 Snipe-IT: 2FA reset privilege bypass

Snipe-IT is an IT asset/license management system. Prior to 8.5.0, a user who can edit other users can reset a superadmin's two-factor authentication through app/Http/Controllers/Api/UsersController.php postTwoFactorReset. The endpoint authorizes update access but does not enforce canEditAuthFiel...

CVE-2026-66397

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-66397 phpMyFAQ before 4.1.6 Path Traversal via category image deletion

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-66397

CVE-2026-66397 affects phpMyFAQ prior to 4.1.6. It fails to validate path traversal in the existing_image field during category updates, allowing an authenticated user to delete arbitrary files via Image::delete(), including the database.php config file. This can disable the installation gate and...

EUVD-2026-49330

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-66397 phpMyFAQ before 4.1.6 Path Traversal via category image deletion

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

PT-2026-64998

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description Authenticated attackers can delete arbitrary files due to insufficient sanitization of path traversal sequences in the existing image field during category updates. This issue occurs within the...

CVE-2026-55728

Stack-based Buffer Overflow CWE-121 in /usr/bin/ltsudo cmdipaddrconflict in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly lo...