CVE-2026-36102

Bluewave Labs Checkmate versions up to and including 3.3.0 are affected by a privilege escalation vulnerability in the inviteController.js component. A remote authenticated administrator can exploit the role parameter at the /api/v1/invite endpoint to escalate their privileges to superadmin . The...

CVE-2026-78954

Incorrect authorization in Extensions in Google Chrome prior to 152.0...

UBUNTU-CVE-2026-74640

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcpmeterctlget fcpioctlsetmetermap bounds the user-supplied Level Meter map size by the driver's own limit of 255 if map.mapsize 255 || map.meterslots 255 return -EINVAL; and passes it to fcpaddnewctl ...

TencentOS Server 3: java-1.8.0-openjdk (TSSA-2026:0926)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0926 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: java-17-openjdk (TSSA-2026:0928)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0928 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

SUSE SLES15 Security Update : kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3771-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3771-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: -...

Dell Client BIOS Arbitrary Write (DSA-2026-280)

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write. Note that Nessus has not tested for this issue but has instead relied only...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

DAHUA_AUTH-BYPASS-CVE-2021-33044

Simulation des Dahua Authentication-Bypass-PoC CVE-2021-33044 Übersicht Dahua-IP-Kameras sind IoT-Geräte, die häufig in Sicherheitsüberwachungssystemen eingesetzt werden. Da sie oft in internen Netzwerken oder über das Internet erreichbar sind, können Sicherheitslücken bei IP-Kameras schwerwiegen...

CVE-2023-23752

CVE-2023-23752 Descrição Este repositório contém scripts Python e Bash que servem como portas do Proof of Concept PoC original escrito em Ruby para a vulnerabilidade CVE-2023-23752 no Joomla! CMS versões 4.0.0 a 4.2.7 feito por 'noraj' Alexandre ZANNI. Foi identificada uma falha de controle de...

CVE-2022-21971

CVE-2022-21971: prauthproviders में अप्रारंभित पॉइंटर मुक्त मूल कारण WapAuthProvider::CreateInstance कंस्ट्रक्टर एक WapAuthProvider ऑब्जेक्ट 0x78 बाइट्स आवंटित और आरंभ करता है लेकिन यह अपनी स्थिति को पूरी तरह से आरंभ करने में विफल रहता है। ऑफसेट 0x50 पर पॉइंटर अप्रारंभित है और डिस्ट्रक्टर...

cdt-vulnsamba-deploy

CDT Team Delta - Distribuzione Samba Vulnerabile Panoramica Questo repository è un deployment basato su Ansible di un server Samba vulnerabile affetto da CVE-2017-7494, una vulnerabilità critica di esecuzione remota di codice. Dovrebbe essere distribuito per il team Delta durante la fase Grey Tea...

FORTIWEB_CVE-2025-64446-58034

Simulazione di sfruttamento di FortiWeb CVE-2025-64446 e CVE-2025-58034 Nota: Questo documento ha solo scopo didattico e di ricerca sulla sicurezza. Non utilizzare per attaccare sistemi senza autorizzazione. 1. Panoramica FortiWeb è un dispositivo Web Application Firewall WAF utilizzato per...

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS Escalation dei Privilegi Locali CVE-2021-3493 Panoramica del Progetto Questo repository contiene documentazione e codice di exploit per una vulnerabilità di Escalation dei Privilegi Locali LPE trovata nel kernel Ubuntu Linux. È stato testato in un ambiente lab...

EternalBlue-Exploit-Demonstration-MS17-010

Dimostrazione dell'Exploit EternalBlue MS17-010 Laboratorio di cybersecurity che dimostra lo sfruttamento della CVE-2017-0144 EternalBlue utilizzando Metasploit contro un sistema Windows 7 vulnerabile, ottenendo accesso a livello SYSTEM tramite Meterpreter. Questo progetto simula inoltre un attac...

EternalBlue-Exploit-Demonstration

EternalBlue Exploit-Demonstration MS17-010 Cybersecurity-Labor, das die Ausnutzung von CVE-2017-0144 EternalBlue mittels Metasploit gegen ein verwundbares Windows 7-System demonstriert und SYSTEM-Ebene-Zugriff über Meterpreter erreicht. Dieses Projekt simuliert außerdem einen Ransomware-Angriff i...

bluekeep-metasploit-lab-project

Sfruttare BlueKeep CVE-2019-0708 su Windows 7 Obiettivo Ottieni accesso remoto a un sistema Windows 7 non patchato tramite la vulnerabilità RDP BlueKeep utilizzando Metasploit. Configurazione del Laboratorio Attaccante: Kali Linux Target: Windows 7 Non patchato, RDP abilitato Rete: NAT / Solo hos...

CVE-2026-75338

disconf Distributed Configuration Management Platform 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these fo...

CVE-2026-69129

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowing an authenticated user with cluster management permissions to operate on clusters outside the scope they were granted. Because...

CVE-2026-65956

KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, so SSO, OIDC, and SAML management operations can be reached without...