604658 matches found
CVE-2025-24893
CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Esecuzione remota di codice Una vulnerabilità di categoria RCE Remote Code Execution, riscontrata quando attaccanti non autenticati possono eseguire codice Groovy arbitrario da remoto senza autenticazione né accesso preliminare Guest User. Di seguito...
bepr
bepr bepr è un piccolo programma di reverse shell autenticato client/server su connessioni WebSocket in uscita. Un singolo binario copre tutte e 3 le modalità: modalità server, modalità client e modalità utente. È pacchettizzato con istruzioni di installazione per rpm, deb e pkg, e pesa 1 MB. Ho...
Fsociety-CVE-2024-0670-CheckMK-LPE
🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - وصول قوي للنظام بكل سهولة 📦 نظرة عامة مرحبًا صديقي. تفتح هذه الأداة وصولًا متقدمًا لـ CheckMK CVE-2024-0670. تستفيد من معالجة ضعيفة للملفات للحصول على دعم SYSTEM. تتضمن البرنامج ميزة استمرارية متخصصة. تم تطويره بلغة C++ ويهدف إلى تزويد المستخدمين بالأدوات...
CVE-2021-3560-EXPLOIT
Descrizione Come parte della mia tesi di cybersecurity, volevo creare un exploit per una vulnerabilità. RACCOMANDO VIVAMENTE di leggere questa guida, poiché questo exploit si basa su di essa: https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ Inoltre, dai un'occhia...
CVE-2026-78155
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges...
EUVD-2026-64648
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges...
CVE-2026-47103-python-statemachine-rce
CVE-2026-47103: Python StateMachine Remotecodeausführung über SCXML-eval-Injection Schweregrad: Kritisch, CVSS 4.0 9.3 , CVSS 3.1 9.8 vergeben von VulnCheck, der CNA Vektor v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vektor v3.1:...
CVE-2026-77116
Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...
EUVD-2026-64639
Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...
CVE-2026-77116
Brave Popup Builder (WordPress plugin, slug: brave-popup-builder) versions through 0.8.5 contain a broken access control vulnerability. Any authenticated user with a low-privilege role (Subscriber or WooCommerce Customer) can read unpublished popup content by passing a post ID in the URL, effecti...
CVE-2026-77116 Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...
EUVD-2026-64636
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products...
CVE-2026-14853 WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products...
CVE-2026-14853
WooCommerce Bookings (WordPress plugin) versions before 3.9.0 contain an authorization flaw: one of its AJAX actions lacks a capability check , and the associated nonce check can be bypassed by simply omitting the token. This allows any authenticated user with Subscriber-level access or above to ...
EUVD-2026-64606
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...
EUVD-2026-64607
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization of untrusted input from the 'postprotectionroles' vulnerable parameter. This makes it possible for authenticated attackers, with...
EUVD-2026-64603
docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...
SUSE CVE-2026-74597
In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip6ip6err ip6ip6err clones an outer IPv6 ICMP error skb, pulls it to the quoted inner IPv6 packet, and then passes the clone to icmpv6send. The clone still carries the outer packet's inet6skbparm in...
SUSE CVE-2026-74733
In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953xirqbussyncunlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions read or write must hold the i2clock. The function...
