CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performe...

n00bRAT

n00bRAT v0.7 Es ist ein winziges C-Programm, das einen minimalistischen HTTP-Server für das Fingerprinting von Sicherheits-Scannern emuliert. Es ermöglicht, den Rechner über dieses vorgetäuschte HTTPv0.1-Protokoll zu steuern. Dieser n00b-Server wurde während des Studiums für den Kurs „Ethical...

Centry

Centry चेतावनी: यह प्रायोगिक सॉफ्टवेयर है। इसमें बग होने की संभावना है। अपडेट्स यदि आपने पहले ही Centry स्थापित कर लिया है, तो नवीनतम संस्करण में अपडेट करने के लिए कृपया git pull चलाएँ। नवीनतम अपडेट इसे रीप्ले हमलों replay attacks के विरुद्ध अधिक सुरक्षित बनाते हैं। परिचय Centry एक पैनिक बटन है...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

dlink_shell_poc

dlinkshellpoc Dlink-Shell-PoC Getestet auf D-Link 815 Version A 1.3 Funktioniert mit: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Hinweis: Der PoC-Code verarbeitet keine Captchas. Beispiel root@kitploit: root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc....

server

Ulterius: Einfache Fernverwaltung Interesse an einer Unterlizenzierung? Möchten Sie unseren Code in Ihrem Stack verwenden oder ihn für den internen Gebrauch umbenennen? Kontaktieren Sie uns unter [email protected] Ulterius ist ein Tool, das uneingeschränkten Zugriff auf ein Windows-System üb...

EUVD-2026-66836

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-24061

CVE-2026-24061 Passaggi per la riproduzione Costruisci l'immagine root@kitploit: docker build -t telnetd-bypass . Avvia il container root@kitploit: docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Invia il payload root@kitploit: USER='-f root' telnet -a 127.0.0...

textpattern-exploit-rce

Textpattern = 4.8.3 Remote Code Execution Authentifiziert Textpattern bis einschließlich Version 4.8.3 erlaubt authentifizierten Benutzern, beliebige PHP-Dateien hochzuladen. Dieses Skript automatisiert den Prozess und ermöglicht das Löschen der hochgeladenen Datei. Verwendung root@kitploit:...

exploit-CVE-2023-3460

title: "Sécurité des SI - CVE 2023-38408" Analisi e sfruttamento della CVE-2023-3460 CVE ID| CVSS Score| Discovered| Affected Plugin| Vulnerability Type ---|---|---|---|--- CVE-2023-3460| | 07/04/2023| Ultimate Member| Unauthorized Admin Access Sommario Introduzione Meccanismo generale della...

ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critico Possibile RCE Jenzabar ICS + MoxieManager proff https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impatto Affetto CVE-2026-30-03 9.8 Critico Possibile RCE Jenzabar ICS + MoxieManager Una vulnerabilità nel component...

hekate

Hekate - VMWare Workspace ONE Access रिमोट कोड निष्पादन एक्सप्लॉइट क्यूहू 360 भेद्यता अनुसंधान संस्थान के स्टीवन सीली LandGrey द्वारा मूल दुष्ट MySQL सर्वर विवरण Hekate का उच्चारण हेह-का-तेह है दिनांक: Tue Feb 22 13:37:00 CST 2022 संस्करण: 21.08.0.1 नवीनतम फ़ाइल:...

CPANEL-CVE-2026-41940

CVE-2026-41940 — cPanel/WHM Bypass dell'Autenticazione Autore: SilySec Ricerca originale: Sina Kheirkhah @SinSinology / watchTowr Labs Gravità: Critica CVSS 9.8 Tipo: Iniezione CRLF → Bypass dell'autenticazione → Shell root Descrizione CVE-2026-41940 è una vulnerabilità critica in cPanel/WHM che...

netgear-telenetenable

telnetenable.py Paul Gebheim Tradotto dal sorgente C disponibile su http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Esecuzione: python telnetenable.py IP - L'indirizzo IP del tuo dispositivo Netgear, solitamente 192.168.1.1 MAC - L'indirizzo MAC deve essere l'indirizzo...