The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2025-10952

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:12+00:00| seen| Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak8ZYRyADH7od6Bkg 2026-08-30 00:00:13+00:00| seen| Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak8ZYRyADH7od6Bkg...

CVE-2020-9758

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:07+00:00| seen| Telegram/MG1fInaYoOLF55uFsSl9CgVeAoVLtxwPoLWcWmhrMEUXxw 2026-08-30 00:00:11+00:00| seen| Telegram/MG1fInaYoOLF55uFsSl9CgVeAoVLtxwPoLWcWmhrMEUXxw...

CVE-2026-48273

creationtimestamp| type| source ---|---|--- 2026-08-29 20:00:05+00:00| seen| https://t.me/CyberDispatch/2538 2026-08-30 00:00:38+00:00| seen| https://t.me/CyberDispatch/2538...

CVE-2024-48887-Exploit

CVE-2024-48887-Cambio di Password non Verificato CWE-620 Panoramica Una vulnerabilità di cambio password non verificato nell'interfaccia GUI di Fortinet FortiSwitch che consente a un attaccante remoto non autenticato di modificare le password degli amministratori tramite una richiesta appositamen...

CVE-2022-23131

CVE-2022-23131 Zabbix - Umgehung der SAML-SSO-Authentifizierung Beschreibung In Fällen, in denen die SAML-SSO-Authentifizierung aktiviert ist nicht standardmäßig, können Sitzungsdaten von einem Angreifer verändert werden, da ein in der Sitzung gespeicherter Benutzer-Login nicht überprüft wurde...

sslnuke

sslnuke -- SSL senza verifica non è sicuro! Abbiamo sentito tutti ripetutamente che SSL senza verifica non è sicuro. Se una connessione SSL non viene verificata con un certificato memorizzato nella cache, può essere facilmente dirottata da qualsiasi aggressore. Quindi nel 2013, si penserebbe che...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Avvelenamento del puntatore Git LFS Catena di fornitura Codice del programma Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Escalation dei privilegi non autenticata tramite modifica non verificata della password nel plugin WordPress Single Sign On For TNG. | ---|--- Gravità| Critica 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Modifica della password...

CVE-2023-7028

CVE-2023-7028 È stato scoperto un problema in GitLab CE/EE che interessa tutte le versioni dalla 16.1 alla 16.1.6 esclusa, dalla 16.2 alla 16.2.9 esclusa, dalla 16.3 alla 16.3.7 esclusa, dalla 16.4 alla 16.4.5 esclusa, dalla 16.5 alla 16.5.6 esclusa, dalla 16.6 alla 16.6.4 esclusa e dalla 16.7 al...

CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Caricamento arbitrario di file non autenticato che porta a Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. Questo strumento è progettato per lo sfruttamento di massa – inserisci una lista di target e provvederà...

CVE-2026-82089

creationtimestamp| type| source ---|---|--- 2026-08-28 06:33:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2chzf6m3i73fv...

CVE-2026-13086

creationtimestamp| type| source ---|---|--- 2026-08-28 04:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4ig6vcwt2b 2026-08-29 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muabaon2662b...

InfraTest

NICHT BEREITSTELLEN, AUSSER ZUM LERNEN ÜBER AWS!!! Derzeit anfällig für CVE-2024-39689. Wir müssen Certifi aktualisieren. Überprüfen Sie dependabot vor der Bereitstellung. Das Vertrauen in eine nicht verifizierte Zertifizierungsstelle kann zu erheblichen Vertrauensverlusten bei Kunden führen...

CVE-2026-81722

creationtimestamp| type| source ---|---|--- 2026-08-27 18:02:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3gl463rh24...

nuclei-templates-ai

Templates Nuclei Gerados por IA 👾 Este projeto é uma implementação da nossa visão detalhada em De CVE para Template: O Futuro da Automação de Templates Nuclei com IA Este repositório demonstra o poder da IA na automação da geração de templates de segurança para detecção de vulnerabilidades. Usand...

-CVE-2024-24450-

-CVE-2024-24450- протестировать позже для гипотетического PoC для CVE-2024-24450...

CVE-2026-77508 Weblate: Unverified REST API email changes

Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/username/ without verifying the new address, allowing a later team invitation for that address to be accepted without access to the...

CVE-2026-77508

Weblate , a web-based localization tool, is affected by an unverified email-change vulnerability prior to version 2026.8 . An authenticated user can modify their primary email via PUT or PATCH requests to /api/users/{username}/ without the new address being verified. This allows a subsequent team...

CVE-2026-77508 Weblate: Unverified REST API email changes

Weblate is a web based localization tool. Prior to 2026.8, an authenticated user can change the account's primary email through PUT or PATCH requests to /api/users/username/ without verifying the new address, allowing a later team invitation for that address to be accepted without access to the...