vulnerability-in-Remix-React-Router-CVE-2025-31137-

अवलोकन @zhero के व्यक्तिगत ब्लॉगपोस्ट में उनके राइटअप को पढ़ने के बाद मैंने इस CTF को बनाने का निर्णय लिया ताकि यह जान सकूं कि चीजें कैसे काम करती हैं, और उसके बाद मैंने इसे उन सभी के साथ साझा करने का फैसला किया जो इस कमजोरी का शोषण करना सीखना चाहते हैं। मैंने [email protected] संस्करण के सा...

CVE-2023-42820

CVE-2023-42820 CVE-2023-42820 Vulnerability Description JumpServer Password Reset Vulnerability USAGE V2 Update 1. Complete refactoring 2. Added default account and email when no account or email is received 3. Improved recognition and calculation of CAPTCHA 4. Automatically modify password 5...

CVE-2023-3460_POC

CVE-2023-3460 استغلال لـ CVE-2023-3460 - وصول غير مصرح به كمسؤول لإضافة Ultimate Member. تم بناؤه باستخدام Golang ╔══════════════════════════════════════════════════╗ ╔══════════════════════════════════════════════════╗ ║ DISCLAIMER ║ ║ ABOUT THE PROJECT ║ ║ ║ ║ ║ ║ This Proof of Concept PoC has...

CVE-2022-22828

CVE-2022-22828 Synametrics - SynaMan संस्करण 4.9 सारांश Viden Labs ने Synametric के SynaMan में एक असुरक्षित प्रत्यक्ष वस्तु संदर्भ IDOR कमजोरी पाई है। यह कमजोरी संस्करण 4.9 और उससे पहले के संस्करणों में मौजूद है। इस कमजोरी को संस्करण 5.0 में ठीक कर दिया गया है। “Insecure direct object references...

Majordomo2 - SMTP/HTTP Directory Traversal

A directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface. id:...

CVE-2022-1388-EXP

CVE-2022-1388-EXP Ceci est CVE-2022-1388-EXP Auteur : Caps@BUGFOR Github:https://github.com/bytecaps Remakeur : LinJacck Github:https://github.com/LinJacck Affichage des fonctionnalités Mode vérification : python CVE20221388.py -v -u targeturl Mode attaque : python CVE20221388.py -a -u targeturl ...

EUVD-2026-91821

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers. This vulnerability may allow unauthorized users to authenticate as oth...

EUVD-2026-91822

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

EUVD-2026-91824

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead t...

CVE-2020-11539

CVE-2020-11539: التحكم غير السليم في الوصول في Tata Sonata Smartband معلومات الوصف: لقد تم تحديد أن السوار الذكي لا يحتوي على إقران مستوى أمان BLE بالوضع 0 والبيانات المنقولة عبر الهواء غير مشفرة. إضافة إلى ذلك، البيانات المرسلة إلى السوار الذكي لا تخضع لأي مصادقة أو تحقق من التوقيع، مما يتيح لأي...

AlmaLinux 9.2 [TuxCare] Security Update: osbuild-composer / osbuild-composer-core / etc (ALMALINUX9.2:CLSA-2026:1790972556)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790972556 advisory. - Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router...

CVE-2024-55271

जिम प्रबंधन प्रणाली CVE-2024-55271 PHP और MySQL का उपयोग करके बनाया गया एक जिम प्रबंधन प्रणाली। लेखा परीक्षक Shoaib Alam - LinkedIn प्रोफ़ाइल विवरण प्रोफ़ाइल अपडेट अनुभाग में CSRF कमज़ोरी जिम प्रबंधन प्रणाली में एक क्रॉस-साइट रिक्वेस्ट फोर्जरी CSRF कमज़ोरी की पहचान की गई है। यह समस्या उपयोगकर्ता...

CVE-2026-97212

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers. This vulnerability may allow unauthorized users to authenticate as oth...

CVE-2026-94592

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

CVE-2026-95102

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead t...

msmq_re

msmqre هذا أحد الثغرات التي تم إصلاحها في MSMQ. https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/ 0:064 r rax=0000000000001000 rbx=000001b4ee9b5cf8 rcx=0000000000000006 rdx=000001b4240b5c24 rsi=0000000000000002 rdi=00000008e6c7fb10...

CVE-2026-95102

The Monta monta.app software is vulnerable to Missing Authentication for Critical Function (CWE-306) within its WebSocket endpoints . The lack of proper authentication mechanisms allows attackers to impersonate charging stations, potentially leading to privilege escalation , unauthorized access t...

CVE-2026-95102 Monta monta.app Missing Authentication for Critical Function

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead t...

CVE-2026-97363 Monta monta.app Improper Restriction of Excessive Authentication Attempts

The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-of-service attacks or brute-force attacks to gain unauthorized access...

CVE-2026-97212 Monta monta.app Insufficient Session Expiration

The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementation results in predictable session identifiers. This vulnerability may allow unauthorized users to authenticate as oth...