CVE-2024-55591

CVE-2024-55591 PoC Ce dépôt contient un PoC Preuve de concept pour CVE-2024-55591 , une vulnérabilité critique de contournement d'authentification découverte dans les produits Fortinet FortiOS et FortiProxy. Aperçu de la vulnérabilité CVE-2024-55591 est une vulnérabilité de contournement...

SonLogger-vulns

CVE-2021-27964 | SonLogger - Caricamento arbitrario di file non autenticato Metasploit Data: 30-01-2021 Autore dell'exploit: Berkan Er [email protected] Homepage del venditore: https://www.sonlogger.com/ Link del software: https://www.sonlogger.com/download Versione: 4.2.3.3 Testato su:...

pmp-exploit

pmp-exploit यह एक्सप्लॉइट Password Manager Pro में पाई गई Privilege Escalation विशेषाधिकार वृद्धि भेद्यता का लाभ उठाता है, जिससे एक सामान्य उपयोगकर्ता को SuperAdmin तक उन्नत किया जा सकता है और फिर एप्लिकेशन में संग्रहीत पासवर्ड और फ़ाइलें डाउनलोड की जा सकती हैं। प्रभावित सिस्टम root@kitploit:...

CVE-2024-21754-Forti-RCE

Vulnerabilidade de Hash de Senha do FortiOS e FortiProxy para RCE CVE-2024-21754 Visão Geral Uma vulnerabilidade crítica, classificada como CVE-2024-21754, foi identificada nas versões do FortiOS e FortiProxy até 7.4.3, 7.2, 7.0, 6.4 e 2.0. Essa vulnerabilidade, categorizada sob CWE-916, envolve ...

CVE-2020-10130

CVE-2020-10130 - SearchBlox produit avant V-9.1 vulnérable à un contournement de logique métier Description du produit : SearchBlox simplifie la recherche en entreprise pour les organisations complexes. Les outils intuitifs et intelligents de SearchBlox offrent une configuration prête à l'emploi,...

CVE-2026-6356

Augmentt: Escalação de Privilégios via Manipulação de Parâmetros Créditos Este CVE foi um esforço colaborativo entre: HelloWorld Autor – GitHub: https://github.com/Penquinsecq Raznov – GitHub: https://github.com/basraznov Descrição Uma vulnerabilidade na aplicação web permite que usuários comuns...

CVE-2026-36102

Bluewave Labs Checkmate versions ≤ 3.3.0 contain a privilege escalation vulnerability in the inviteController.js component. A remote authenticated administrator can elevate their role to superadmin by manipulating the role parameter sent to the /api/v1/invite endpoint. The vulnerability is in the...

CVE-2026-37071

CVE-2026-37071 Beliebige Dateiumbenennung führend zur Erhöhung von Berechtigungen in der Funktion Actions::renameFile im Veno File Manager Project 4.4.9 ermöglicht es einem authentifizierten Angreifer mit der Berechtigung 'reanme', das Superadministratorkonto zu übernehmen, indem er eine speziell...

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 è vulnerabile alla cancellazione arbitraria di file. Per sfruttare la vulnerabilità, un attaccante autenticato con il ruolo di superadmin può inviare una richiesta POST appositamente predisposta all'endpoint interessato utilizzando il parametro url...

CVE-2023-25355-25356

Exploit e crediti L'exploit è stato trovato da [email protected] ed è presentato in due fantastici lavori: articolo full disclosure slide DEFCON31 Un repository per automatizzare ulteriormente questa vulnerabilità è stato pubblicato da Alex Linov: https://github.com/AlexLinov/sipXcom-RCE...

CVE-2025-15602-PoC

CVE-2025-15602-PoC CVE-2025-15602-PoC è una prova di concetto per la vulnerabilità CVE-2025-15602 in Snipe-IT. Uno script per elencare tutti gli utenti e uno script per impossessarsi di un account superadmin. Contesto Un utente ha solo il diritto di modificare gli utenti, può abusarne per elencar...

CVE-2026-50550

CVE-2026-50550 is a missing authorization vulnerability in Snipe-IT , an IT asset and license management system built on Laravel, affecting versions prior to 8.5.0 . The postTwoFactorReset() endpoint in app/Http/Controllers/Api/UsersController.php checks for general update access but fails to enf...

CVE-2026-50550 Snipe-IT: 2FA reset privilege bypass

Snipe-IT is an IT asset/license management system. Prior to 8.5.0, a user who can edit other users can reset a superadmin's two-factor authentication through app/Http/Controllers/Api/UsersController.php postTwoFactorReset. The endpoint authorizes update access but does not enforce canEditAuthFiel...

CVE-2026-66397

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-66397 phpMyFAQ before 4.1.6 Path Traversal via category image deletion

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-66397

CVE-2026-66397 affects phpMyFAQ prior to 4.1.6. It fails to validate path traversal in the existing_image field during category updates, allowing an authenticated user to delete arbitrary files via Image::delete(), including the database.php config file. This can disable the installation gate and...

EUVD-2026-49330

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

CVE-2026-66397 phpMyFAQ before 4.1.6 Path Traversal via category image deletion

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existingimage field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

PT-2026-64998

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description Authenticated attackers can delete arbitrary files due to insufficient sanitization of path traversal sequences in the existing image field during category updates. This issue occurs within the...

CVE-2026-55728

Stack-based Buffer Overflow CWE-121 in /usr/bin/ltsudo cmdipaddrconflict in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a superadmin-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly lo...