CVE-2026-10795

CVE-2026-10795 CVE-2026-10795 – Bypass di autenticazione in UpdraftPlus CVE-2026-10795 – PoC per il bypass di autenticazione in UpdraftPlus ⚠️ Disclaimer: Questo repository è solo a scopo educativo. Usalo esclusivamente su sistemi di tua proprietà o per i quali hai ricevuto esplicita...

cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure

CVE-2026-34474: Fuga di segreti su ZTE H298A / H108N tramite ETHCheat Analisi tecnica di CVE-2026-34474, in cui una richiesta non autenticata ETHCheat=1 induce i router ZTE ZXHN H298A 1.1 e H108N 2.6 interessati a restituire la password di amministrazione attiva, l'ESSID e il PSK WLAN nel markup...

CVE-2022-21907

CVE-2022-21907 Descrizione root@kitploit: POC per CVE-2022-21907: Vulnerabilità di esecuzione remota di codice nello stack del protocollo HTTP. creato da Malwareman il 2022-09-17. Dettagli root@kitploit: Vulnerabilità di esecuzione remota di codice nello stack del protocollo HTTP. Simile a...

CVE-2026-9018

CVE-2026-9018 CVE-2026-9018 — Easy Elements for Elementor ≤ 1.4.5 | Escalação de Privilégios sem Autenticação Pesquisa por: Atomic Edge Severidade: Alta | CVSS: 8.8 | Autenticação necessária: Nenhuma Visão Geral Existe uma vulnerabilidade de escalação de privilégios sem autenticação no plugin...

CVE-2021-43798

Exploração do Grafana CVE-2021-43798 Visão Geral Este repositório demonstra a exploração do CVE-2021-43798, uma vulnerabilidade de travessia de diretório no Grafana. Essa vulnerabilidade permite que invasores leiam arquivos arbitrários no servidor. Detalhes do CVE CVE : CVE-2021-43798 Descrição :...

CVE-2026-82181 Le-yan｜Medical Practice Management System - Sensitive Data in URL

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

EUVD-2026-67715

Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files...

CVE-2026-82181

Medical Practice Management System developed by Le-yan contains a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information by viewing a victim's browser history or log files , as sensitive data is exposed directly in the URL. The vulnerability is rate...

CVE-2023-22527-POC

CVE-2023-22527: Vulnerabilità di Atlassian Confluence Introduzione La vulnerabilità CVE-2023-22527 è una grave falla di sicurezza in Atlassian Confluence, una piattaforma di collaborazione e documentazione ampiamente utilizzata. Questa vulnerabilità è presente sia in Confluence Data Center che in...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi non autenticato a Root RCE Gravità: Critico Tipo: SQL Injection non autenticata → Esecuzione remota di codice Software interessato: FreePBX modulo endpoint Testato su: FreePBX su CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Panoramica Esiste una vulnerabilità di SQL...

By-Poloss..-..CVE-2026-7515-PoC

CVE-2026-7515: BetterDocs Pro = 3.8.0 - Inclusione Locale di File Non Autenticata Panoramica...

WordPress Shared Files Pro plugin < 1.7.68 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by Huynh Kien Minh in WordPress Plugin Shared Files Pro versions 1.7.68...

WordPress Shared Files plugin < 1.7.67 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability discovered by Huynh Kien Minh in WordPress Plugin Shared Files versions 1.7.67...

CVE-2021-21425

CVE-2021-21425 - GravCMS Unauthenticated RCE Improved proof-of-concept for CVE-2021-21425, an unauthenticated Remote Code Execution vulnerability in GravCMS = 1.10.7 via arbitrary YAML write to the scheduler. Credit This is derivative work. The vulnerability and the original exploit are not mine...

CVE-2025-24893

CVE-2025-24893 XWiki Platform é uma plataforma wiki genérica que fornece serviços de runtime para aplicações construídas sobre ela. Devido a uma vulnerabilidade no endpoint SolrSearch, um usuário não autenticado pode obter execução remota arbitrária de código. Esta vulnerabilidade afeta a...

WordPress Ultimate Member plugin 2.6.7-2.12.1 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Jakub Herman in WordPress Plugin Ultimate Member versions 2.6.7-2.12.1...

CVE-2025-55182

CVE-2025-55182 — React2Shell Pre-Authentifizierung Remote Code Execution in React Server Components RSC, Next.js und verwandten Frameworks. Übersicht CVE-2025-55182 auch bekannt als React2Shell ist eine kritische Pre-Authentifizierung RCE-Schwachstelle, die das React Server Components RSC Ökosyst...

WordPress WP Rocket plugin <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint vulnerability

Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocketbeacon Endpoint vulnerability discovered by WordFence in WordPress Plugin WP Rocket versions = 3.21.0.1...

CVE-2026-81578

CVE-2026-81578 is an improper access control vulnerability in the web management interface of PaperCut MF and PaperCut NG (CVSS 8.8, network vector, no privileges required). The root cause lies in PaperCut's use of the Apache Tapestry framework , where authorization is validated only against the ...

EUVD-2026-67713

An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...