1433100 matches found
CVE-2023-32629
CVE-2023-32629 — OverlayFS Local Full Privilege Escalation OverlayFS Local Privilege Escalation - Full write-up to full escalation For educational and authorized security research purposes only. Severity: High Type: Local Privilege Escalation LPE Affected: Ubuntu kernels prior to May/June 2023...
kentico-xperience13-AuthBypass-wt-2025-0011
WT-2025-0011（尚未分配 CVE） Kentico Xperience 13 CMS - Staging Service 身份验证绕过检测 检测演示 root@kitploit: python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / //...
CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit
CVE-2026-20245 - Cisco SD-WAN Privilege Escalation Exploit ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. 📋 Descripción CVE-2026-20245 es una vulnerabilidad de escalada de privilegios en la CLI de Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalyst...
CGA-8FF8-M442-J33X
Bulletin has no description...
CGA-PRJ7-MRX9-W8M3
Bulletin has no description...
CGA-FP5M-GMJ8-2QV9
Bulletin has no description...
CGA-J97M-PH9G-PFGF
Bulletin has no description...
CGA-3GGJ-5X83-X4Q9
Bulletin has no description...
CGA-4HQC-RWM6-6H28
Bulletin has no description...
CGA-5Q69-VW9W-RRF8
Bulletin has no description...
[SECURITY] [DSA 6492-1] ruby-rack security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6492-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 10, 2026 https://www.debian.org/security/faq -...
Traefik: ForwardAuth identity spoofing via dot-form header alias
Summary There is a medium severity vulnerability in Traefik's handling of request headers whose name aliases another header name. Go canonicalizes header names on dashes only, so X-Auth-User, XAuthUser and X.Auth.User are three distinct headers to Traefik, while backends that derive variable name...
GHSA-RF44-J88R-HH8C Traefik: ForwardAuth identity spoofing via dot-form header alias
Summary There is a medium severity vulnerability in Traefik's handling of request headers whose name aliases another header name. Go canonicalizes header names on dashes only, so X-Auth-User, XAuthUser and X.Auth.User are three distinct headers to Traefik, while backends that derive variable name...
honeypot
🍯 Honeypot Research Project What is a Honeypot A honeypot is a computer system or network that is intentionally left vulnerable to hackers in order to detect, analyse, and respond to potential security threats. The goal of a honeypot is to gather information about the tactics, techniques, and...
G2.5_Openssl_V_1_0_1g
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
G2.5_Openssl
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
openssl_g2.5_v1_0_1g
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2026-89087
The cstruct package before 6.3.0 for OCaml mishandles indexes...
CVE-2026-89086
In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS 1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key...