CVE-2023-4357-Exploitation

CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...

opnsense-captive-lastseen-roam

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-captive-lastseen-roam opnsense-captive-lastseen-roam Class: Network-access bypass Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org Captive-portal roaming still inherits a session for the newest...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 A simple script for exploit RCE for Struts 2 S2-053CVE-2017-12611 Usage exploit.py Example $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

CVE-2025-30208

CVE-2025-30208 Using a special raw import query string on a vite dev server, a attacker can read arbitrary files Summary of the CVE Vite dev servers before 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 can bypass the server.fs.deny file access checks for @fs requests. Appending ?raw?? or ?import&raw??...

spydir

Usage: spydir.exe Monitor directory changes with all subdirectories For any files, including ones you have no access CVE-2007-0843 as on January, 2007 c Vladimir Dubrovin, 3APA3A http://securityvulns.com http://securityvulns.ru This approach is not reliable and should not be used for audit and...

NetSec-CVE-2023-4357

Network Security Project — CVE-2023-4357 Overview This project is a final project for a Network Security course. The project focuses on CVE-2023-4357, a vulnerability affecting Google Chrome versions prior to 116.0.5845.96. The vulnerability is related to the handling of XML/XSLT and can allow a...

CVE-2026-84910 Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5...

CVE-2026-84910

The Drupal Advanced Search module (versions 0.0.0 to 2.4.5 ) is vulnerable to a Missing Authorization issue (CWE-862) leading to Forceful Browsing . The root cause is that the module fails to sufficiently verify block access when arbitrary block IDs are submitted to its publicly accessible AJAX e...

CVE-2026-84910 Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118

Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84912

The Drupal AI module is affected by a Missing Authorization vulnerability (CWE-862) in the AI Translate submodule. The root cause is insufficient access checks on entities, related fields, or referenced entities during the AI translation process, particularly when these components have different ...

CVE-2026-84913

A Missing Authorization vulnerability in the Drupal AI Translate module (versions 0.0.0 to 1.3.2 and 1.4.0 to 1.4.1) allows for Forceful Browsing . The root cause is that the module fails to sufficiently verify access permissions for the entity being translated, its related fields, or referenced ...

CVE-2026-84912 AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120

Missing Authorization vulnerability in Drupal AI Artificial Intelligence allows Forceful Browsing. This issue affects AI Artificial Intelligence versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8...

CVE-2026-84913 AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1...

CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914

The Calculate Working Days Drupal module (versions 0.0.0 to 2.0.3 ) is vulnerable to a Missing Authorization flaw (CWE-862 ). The module fails to sufficiently restrict access to its settings form , which allows for Forceful Browsing . An attacker could potentially access and modify configuration ...

CVE-2026-84916 Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0...

CVE-2026-84916 Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126

Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0...