CVE-2026-65400-poc

CVE-2026-65400 — Lettura file root pre-autenticazione in macOS Screen Sharing PoC di sola lettura Proof of concept di sola lettura. Dimostra il bypass dell'autenticazione leggendo un file accessibile solo a root da un host vulnerabile. Non scrive nulla sul target: nessun LaunchDaemon, nessun file...

CVE-2021-34045

Informações Exploit Title：Novel-plus-install-v3.5.3-Druid Unauthorized access Data do exploit：01.06.2021 Autor do exploit：Al1ex@Heptagram Página inicial do fornecedor：https://github.com/201206030/novel-plus Versão afetada：novel-plus-install-v3.5.3 Descrição：O sistema Novell plus carrega o...

CVE-2020-9470

Cos'è questo Wing FTP Server 6.2.5 - Escalation dei privilegi Introduzione Una debolezza nella gestione delle sessioni HTTP all'interno di Wing FTP Server permette a qualsiasi utente locale di elevare i privilegi a root su Linux, MacOS e Solaris. Lo sfruttamento è subordinato a una sessione...

CVE-2026-67204

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

CVE-2026-21752

HCL Hive is affected by a use of vulnerable third-party components which could allow an attacker unauthorized access or compromise of the system by exploiting publicly documented security flaws...

FOSKiller

root@kitploit: ███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║...

CVE-2026-19685

NetworkManager failed to enforce the private_user restriction on the 802-1x.ca-path and phase2-ca-path directory-valued connection properties—an incomplete fix for CVE-2025-9615. An unprivileged local user can point a private WPA-Enterprise (802.1X) profile's CA path at an attacker-controlled dir...

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP per CVE-2023-28434 MinIO non autorizzato a RCE Modificato da https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Cosa è stato cambiato? aggiungere cmd/x.go, usato per eseguire comandi di sistem...

CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

CVE-2026-77915 rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig Core 8.0.0 before 8.2.13 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrator privileges due to a duplicate bare Auth::routes call in routes/web.php that re-enables the POST /register route after it was...

p4wned

P4WNED CVE-2026-6043 Strumenti di ricerca sulla sicurezza di Perforce Helix Core e nuclei templates. Articolo di ricerca: https://morganrobertson.net/p4wned/ Leggi il link sopra per i dettagli completi. Solo destinazioni autorizzate. Usalo sui tuoi server o con esplicita autorizzazione scritta...

CVE-2024-25832-PoC

CVE-2024-25830 e CVE-2024-25832 - Controllo degli accessi improprio e caricamento di file senza restrizioni in DataCube3. Panoramica Questo repository presenta un Proof of Concept PoC per una catena di exploit in due fasi che prende di mira i dispositivi DataCube3. Combina CVE-2024-25830 Controll...

Malicious code in dims-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a85d660f6cc363a81624c7383318958bb46f2d6958fdad71e595692420d805d On any import 'dims-hydration-ui', index.mjs chmods 0755 and spawns a bundled Linux x8664 ELF at dist/internal/calc.dat as a detached child, describe...

Ghost-Path-Traversal-CVE-2023-32235-

Report di Bug Bounty - Ghost Path Traversal CVE-2023-32235 Sommario L'applicazione Ghost è vulnerabile a una vulnerabilità di path traversal, identificata come CVE-2023-32235. Questa vulnerabilità consente a un attaccante di accedere a file sensibili al di fuori della directory prevista manipolan...

CVE-2026-57216

A flaw was found in RabbitMQ, a messaging and streaming broker. The AMQP 0-9-1, AMQP 1.0, and Stream Protocol authentication mechanisms incorrectly perform a loopback check. This allows a user, typically restricted to loopback connections such as a guest user, to connect remotely. This occurs whe...

CVE-2026-74641

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

EUVD-2026-64919

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

CVE-2026-67204

BookStack before 26.05.4 contains a broken access control vulnerability in the Image Gallery API endpoints . The API controller loads any image type without the content-type restrictions enforced by the web controller's gallery and drawio checks. An authenticated user with image-update or image-d...

CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...