CVE-2026-82733

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal application data from an HTTP 500 response body. When a typed-controller route handler returns anything other than a %Plug.Conn, dispatch/3 i...

CVE-2026-77950

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...

CVE-2026-75865

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-77856

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied typed struct field names. resolvetypedstructfield/2 in...

CVE-2026-74837

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied RPC field names. AshTypescript.FieldFormatter.converttofieldatom/2 in...

CVE-2025-31161

CVE-2025-31161 is a critical severity vulnerability allowing attackers to control how user authentication is handled by CrushFTP managed file transfer MFT software. Affected versions: 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 Exploit summary: Remote and unauthenticated HTTP requests to...

Thank-u-Next

Thank u Next – CVE-2025-29927 Exploit Tool 🧠 What is CVE-2025-29927? It’s not just a bypass — it’s a revelation. A single header, misunderstood and mishandled by middleware logic, becomes a master key to what was meant to be locked. CVE-2025-29927 exploits a misconfigured middleware authorization...

CVE-2018-11510

A couple exploits for CVE-2018-11510 by Kyle Lovett @SquirrelBuddha and myself Matthew Fulton/@haqur. Leverages an unauthneticated command injection to get a root shell back. The metasploit module has a separate payload included in the repo. Will see if I can get them included via a pull request...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code Execution Vulnerability Check out our blog post for detailed technical information. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 Exploit Demonstration root@kitploit:...

CVE-2022-23862

CVE-2022-23862 : Élévation de privilèges locale via JMX non authentifié dans YSoft SafeQ Le service JMX SafeQ fonctionnant sur le port 9696 est vulnérable aux attaques JMX MLet. Comme le service n'imposait pas d'authentification et s'exécutait sous l'utilisateur « NT Authority\System », nous avon...

CVE-2021-42558

CVE-2021-42558: Multiple Cross-Site Scripting in MITRE Caldera Caldera versions =2.8.1 contains multiple reflected, stored and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers. Vendor Disclosure: The vendor's disclosure for this vulnerability can be...

cve-2026-41042

CVE-2026-41042: Apache Gravitino 1.2.1 — تنفيذ تعليمات برمجية عن بُعد دون مصادقة RCE إثبات مفهوم PoC مكتفٍ ذاتيًا ويعتمد على المكتبة القياسية فقط لثغرة CVE-2026-41042: تنفيذ تعليمات برمجية عن بُعد دون مصادقة في Apache Gravitino قبل الإصدار 1.2.1 عبر إعداد اتصال H2 JDBC INIT. لا ترويسات مصادقة، ول...

CVE-2019-12409

CVE-2019-12409: RCE Vulnerability Due to Bad Defalut Config in Apache Solr The 8.1.1 and 8.2.0 releases of Apache Solr contains insecure setting in the default solr.in.sh configuration file shipping with Solr. The setting that result in this vulnerability are: In "solr.in.sh":...

CVE-2026-71203-PoC

CVE-2026-71203 — changedetection.io : Authentification manquante sur /api/v1/full-spec divulgue le schéma OpenAPI complet Produit : dgtlmoon/changedetection.io — v0.55.7 Fichier : changedetectionio/api/Spec.py CWE : CWE-306 — Authentification manquante pour une fonction critique CVSS 3.1 :...

CVE-2026-13714

Realtyna WPL 5.3.0 - استغلال RCE بدون مصادقة الوصف يستهدف هذا الاستغلال ثغرة أمنية حرجة في إصدارات إضافة Realtyna Organic IDX + WPL Real Estate الأقدم من 5.3.0. تستخدم الإضافة بيانات اعتماد مضمّنة hardcoded وتسمح برفع ملفات بدون مصادقة، مما يؤدي إلى تنفيذ التعليمات البرمجية عن بُعد RCE. تفاصيل...

CVE-2026-75865 WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saasuploadlogo function combined with an authorization bypass on the WPLP connector REST endpoin...

CVE-2026-75865

WPLP Cookie Consent (a WordPress plugin for GDPR/CCPA consent management) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.4.1 . The root cause combines missing file type validation in the saas_upload_logo() function with an authorization bypass on the ...

CVE-2023-23752-Python

CVE-2023-23752-Python root@kitploit: usage: CVE-2023-23752.py -h url Joomla! 4.2.8 - Unauthenticated information disclosure positional arguments: url Root URL base path including HTTP scheme, port, and root folder options: -h, --help show this help message and exit...

CVE-2025-10230

CVE-2025-10230: सांबा क्रिटिकल RCE CVSS 10.0 भेद्यता सारांश CVE-2025-10230 एक गंभीर रिमोट कोड निष्पादन RCE भेद्यता है जो 13 वर्षों तक सांबा कोडबेस में छिपी रही। यह दोष WINS विंडोज इंटरनेट नेम सर्विस रजिस्ट्रेशन पैकेट के हैंडलिंग में है। जब wins support = yes के साथ डोमेन कंट्रोलर के रूप में...

Mitigate-CVE-2023-46747

Playbook Ansible pour atténuer CVE-2023-46747 K000137353: vulnérabilité d'exécution de code à distance non authentifiée dans l'utilitaire de configuration BIG-IP CVE-2023-46747 Voici le lien https://my.f5.com/manage/s/article/K000137353 Comment l'utiliser 1. Git clone mon dépôt...