CVE-2026-18121

Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) in the Calendar block's frontend event dialog (/ccm/calendar/view_event/{bID}/{occurrence_id}). The controller loads the event occurrence from an attacker-supplied sequential identifier without verifying that the caller ...

rclone: S3 multipart declared-length memory exhaustion

Summary In streamed multipart mode, serve s3 passes the request's declared part length to multipart.NewRW.ReservecontentLength before reading any part data. Reserve immediately obtains enough 1 MiB pool pages for the entire declared length. The request handler therefore allocates attacker-selecte...

CVE-2026-39987

CVE-2026-39987 - Marimo Pre-Authentication RCE CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting Marimo, a reactive Python notebook environment. The vulnerability exists in Marimo's terminal WebSocket endpoint: root@kitploit: /terminal/ws The endpoi...

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Bypass de Autenticación Información El plugin de WordPress Social Login and Register Discord, Google, Twitter, LinkedIn es vulnerable a un bypass de autenticación en versiones hasta la 7.6.4 inclusive...

CVE-2026-76653 Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 v2, v3 & v5 and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modify VPN configuration information without valid credentials...

CVE-2026-76653

A missing authentication flaw in the VPN configuration management interface of TP-Link Archer MR600 (firmware v2, v3, and v5) and TL-MR6400 (firmware v8) stems from improper access control , allowing a remote unauthenticated attacker on an adjacent network to disclose and modify VPN configuration...

CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment

CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment Una evaluación de seguridad del Beat XP VEGA Smartwatch Firmware RB303ATV006229 centrada en la conectividad Bluetooth Low Energy BLE reveló una debilidad de diseño e implementación que permite que un dispositivo central BLE cercano...

tiktok-scraper

TikTok Scraper & Downloader Extrae y descarga información útil de TikTok. No se requiere inicio de sesión ni contraseña. Esto no es un soporte de API oficial, etc. Esto es solo un scraper que utiliza la API web de TikTok para extraer contenido multimedia. Características Extraer publicaciones de...

EUVD-2026-75707

A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...

CVE-2026-8237

CVE-2026-8237 CVE-2026-8237 is an Insecure Direct Object Reference IDOR vulnerability caused by missing authorization checks in Concrete CMS 9.5.0 and earlier.The flaw exists in the /ccm/frontend/conversations/messagedetail endpoint, which returns the full contents of conversation messages based...

CVE-2026-88059

A flaw was found in Angular. When Server-Side Rendering SSR and hydration are used with a hierarchical HttpClient configured with withRequestsMadeViaParent, the HttpTransferCache can improperly cache authenticated responses. This occurs because a child TransferCache stores private response data i...

CVE-2026-88062

OmniRoute (open-source AI gateway) versions 3.8.49 and earlier are affected by a remote code execution flaw in the POST /api/acp/agents custom ACP agent endpoint. Attacker-controlled binary and versionCommand values pass a self-consistency check and a limited metacharacter filter (tokenizeVersion...

CVE-2025-29705

CVE-2025-29705 CVE-2025-29705 Introduction code-gen: A code generation tool that allows custom templates to generate different code, supporting MySQL, Oracle, SQL Server, PostgreSQL https://gitee.com/durcframework/code-gen This project has no access control, allowing anyone to freely access such...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

Solr-GRAB

Solr-GRAB Roba consultas de instancias de Apache Solr con o sin nombre de usuario y contraseña. DESCARGO DE RESPONSABILIDAD : Este proyecto debe usarse solo para pruebas autorizadas y fines educativos. Descarga root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB Uso Puedes buscar...

CVE-2025-9074-docker-escape

CVE-2025-9074-Docker Escape HTB MonitorsFour Este código es solo para fines educativos y entornos controlados como laboratorios Hack The Box. No usar en sistemas sin autorización. Este repositorio contiene un script de explotación para la vulnerabilidad Docker Remote API exposed sin autenticación...

CVE-2026-8732-POC

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927

Aplicación Next.js Vulnerable para Práctica de Pentesting Esta es una aplicación Next.js diseñada intencionalmente para ser vulnerable a CVE-2025-29927: La Vulnerabilidad de Bypass de Autorización de Middleware de Next.js. ⚠️ Aviso Legal Esta aplicación es solo para fines educativos y de hacking...

CVE-2023-2732

CVE-2023-2732 MStore API = 3.9.2 - Bypass de autenticación https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/mstore-api/mstore-api-392-authentication-bypass Descripción root@kitploit: The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up...

CVE-2024-23747

CVE-2024-23747 The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference IDOR vulnerability. PoC This vulnerability resides in the system's handling of user data access through a /Modernanet/LAUDO/LAU0000100/Laudo?id= URL. Bymanipulating...