CVE-2026-63077

Überblick • Visueller Ablauf • Voraussetzungen • Verwendung • Einschränkungen • Abwehrhinweise !CAUTION Dieser PoC führt einen Betriebssystembefehl aus und kann das TeamCity-Anwendungsverzeichnis verändern. Verwenden Sie ihn nur in einer isolierten Laborumgebung oder gegen Systeme, für die Sie ei...

CVE-2023-2825

CVE-2023-2825 Il 23 maggio 2023 GitLab ha rilasciato la versione 16.0.1 che ha risolto una vulnerabilità critica, CVE-2023-2825, che interessava le versioni Community Edition CE ed Enterprise Edition EE 16.0.0. La vulnerabilità consente a utenti non autenticati di leggere file arbitrari attravers...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - Aggiornamento non autenticato di opzioni arbitrarie Descrizione: Il plugin Signup Page per WordPress è vulnerabile a modifiche non autorizzate dei dati che possono portare a escalation dei privilegi a causa di un controllo delle capacità mancante in tutte le...

CVE-2018-9995_dvr_credentials

Strumento mostra credenziali DVR root@kitploit: Titolo exploit: "Ottiene credenziali DVR" CVE: CVE-2018-9995 Punteggio Base CVSS v3: 7.3 / 10 Stringa vettore CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autore exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

CVE-2026-14494

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

CVE-2020-14181

CVE-2020-14181 Poc für CVE-2020-14181 Betroffene Versionen von Atlassian Jira Server und Data Center erlauben es einem nicht authentifizierten Benutzer, Benutzer über eine Schwachstelle zur Offenlegung von Informationen im Endpunkt /ViewUserHover.jspa aufzulisten. Diese Schwachstelle wurde von...

CVE-2026-82449 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing

Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can measure response times across multiple requests to determine which accounts exist by observing that existing accounts trigger bcry...

EUVD-2026-68097

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-82448

Shinobi (a self-hosted CCTV/surveillance platform) contains a hardcoded connection key in its child node service prior to commit 5a76c74f . An unauthenticated attacker who can reach the child node port can present this key during the WebSocket handshake and then dispatch arbitrary SQL queries thr...

CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

CVE-2026-33137

CVE-2026-33137 XWiki Platform – Nicht authentifizierter XAR-Import via REST/wikis/wikiName Beschreibung Der REST-API-Endpunkt POST /wikis/wikiName in der XWiki-Plattform führt einen XAR-Import XWiki-Archiv durch, ohne dabei eine Authentifizierungs- oder Autorisierungsprüfung vorzunehmen. Ein nich...

omigod-lab

Readme Una VM di laboratorio educativa per apprendere la vulnerabilità di esecuzione remota di codice RCE non autenticata con punteggio CVSS 9.6 nel software Open Management Infrastructure CVE-2021-38647. Divulgazione ricerca originale:...

CVE-2025-32433_Erlang-OTP_PoC

CVE-2025-32433Erlang-OTP Dieses Skript ist ein benutzerdefiniertes Sicherheitstool, das entwickelt wurde, um auf eine kritische Pre-Authentifizierungs-Schwachstelle in Systemen zu testen, die auf Erlang-basierten SSH-Servern laufen Dieses Skript ist ein benutzerdefiniertes Sicherheitstool, das...

CVE-2026-9082

🚨 CVE-2026-9082 : SQL-Injection-Schwachstelle im Drupal Core Hochwirksame SQL-Injection-Schwachstelle im Drupal Core PostgreSQL 📋 Übersicht CVE-2026-9082 ist eine SQL-Injection -Schwachstelle in der Datenbank-Abstraktionsschicht von Drupal Core. Sie betrifft nur Websites, die PostgreSQL als...

CVE-2026-34234-Lab

CVE-2026-34234 - Lab RCE dell'Installer CtrlPanel Lab Docker locale per dimostrare CVE-2026-34234 in CtrlPanel. Questo repository confronta: vuln: CtrlPanel 1.1.1 bloccata tramite digest patched: CtrlPanel 1.2.0 bloccata tramite digest Il lab è esclusivamente locale e vincola i servizi a 127.0.0....

CVE-2026-14494 Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

EUVD-2026-68094

The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handleformsubmission function. This is due to the plugin dynamically granting the unfilteredupload capability to all users during form submissions and bypassing MIME...

CVE-2024-8529

CVE-2024-8529 LearnPress – Plugin LMS per WordPress = 4.2.7 - SQL Injection non autenticata tramite 'cfields' Descrizione Il plugin LearnPress – WordPress LMS Plugin per WordPress è vulnerabile a SQL Injection tramite il parametro 'cfields' dell'endpoint API REST...

cve-2021-21425

Exploit für: GravCMS 1.10.7 - Beliebiges YAML Schreiben/Aktualisieren Unauthentifiziert Verwendung: root@kitploit: python3 exploit.py --url http://192.168.204.12/grav-admin Erwartetes Verhalten Verwenden Sie diesen Exploit nicht auf Systemen, für die Sie nicht autorisiert sind! Frohes Hacken...