CVE-2024-38063

CVE-2024-38063 Visão Geral Em agosto de 2024, a Microsoft lançou uma correção para uma vulnerabilidade de Execução Remota de Código RCE no TCP/IP do Windows. Alguns pesquisadores já publicaram Provas de Conceito PoC para esta vulnerabilidade e, aproximadamente ao mesmo tempo, os pesquisadores da...

CVE-2024-26026

CVE-2024-26026 Iniezione SQL non autenticata nell'API di BIG-IP Next Central Manager link: https://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/...

CVE-2023-47218

CVE-2023-47218 CVE-2023-47218: Iniezione di comando non autenticata in QNAP QTS e QuTS Hero RISOLTO POC root@kitploit: POST /cgi-bin/quick/quick.cgi?func=switchos&todo=uploaffirmwareimage HTTP/1.1 Host: 192.168.86.42:8080 User-Agent: Mozilla Macintosh Accept: / Content-Length: 164 Content-Type:...

CVE-2026-33017

CVE-2026-33017 — PoC RCE non autenticata di Langflow Disclaimer Questo repository è stato creato a scopo di ricerca e formazione sulla sicurezza. Utilizzarlo esclusivamente in ambienti di laboratorio isolati. L'uso su sistemi non autorizzati costituisce una violazione della legge sulle reti di...

CVE-2023-38646

CVE-2023-38646-exploit "Diese Schwachstelle, bezeichnet als CVE-2023–38646, erlaubte Angreifern, beliebige Befehle auf dem Server auszuführen, ohne dass eine Authentifizierung erforderlich war." Ein schnelles Reverse-Shell-Exploit-Skript für cve-2023-38646. Ich habe diese Schwachstelle nicht...

CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

CVE-2019-9053 - Exploit di SQL Injection per CMS Made Simple Modificato Descrizione Questa è una versione modificata dell'exploit di SQL injection basato sul tempo per CMS Made Simple = 2.2.9. L'exploit è stato originariamente creato da Daniele Scanu ed è stato aggiornato per una migliore...

CVE-2018-10933

Bypass de Autenticação do libSSH Obtenha um shell sem nenhuma credencial usando o CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Informações sobre o CVE-2018-10933 pelo libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Lançamento de correção de seguranç...

CVE-2026-48908-PoC

CVE-2026-48908 — SP Page Builder Joomla RCE non autenticata Proof-of-concept per CVE-2026-48908 , una vulnerabilità critica CVSS 4.0 = 10.0 di esecuzione di codice in remoto non autenticata nel componente SP Page Builder comsppagebuilder per Joomla, di JoomShaper...

CVE-2026-72550-poc

CVE-2026-72550 — Iniezione SQL non autenticata in Friendica L'iniezione SQL a query impilate non autenticata nell'endpoint delle foto di Friendica consente a qualsiasi visitatore di eseguire SQL arbitrario...

CVE-2026-81827

Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Emailemail. That does not perform WTForms field validation; it merely constructs a validator object. Consequently, malformed attacker-controlled email input could continue through the login process a...

CVE-2026-81735

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81721

opensslencrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious encrypted files declaring arbitrarily large Argon2, scrypt, or balloon KDF parameters to...

CVE-2026-81678

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

CVE-2026-81335

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81096

ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no authentication. The executor behind the pythoncodeexecutor tool, in pythonexecutortool.py, inspected the submitted source for a denied list of attribute names and calls but left the...

CVE-2026-80207

APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxies every /api request to the...

CVE-2026-80208

APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxi...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...