CVE-2022-26923

CVE-2022-26923 Description This vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services AD CS server role installed. It is mainly related to the Active Directory Certificate...

CVE-2024-0204

CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Deep-Dive This repository contains a proof-of-concept exploit for the authentication bypass vulnerability CVE-2024-0204 discovered in Fortra's GoAnywhere MFT product. The vulnerability allows an unauthenticated attacker to create an...

Invoke-SessionHunter

Invoke-SessionHunter Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs...

CVE-2024-6244

🚀 pz-frontend-manager = 1.0.5 - CSRF Profile Picture Exploit 🛠️ Description This script exploits a CSRF vulnerability in the WordPress plugin pz-frontend-manager versions = 1.0.5 to change the profile picture of a logged-in user without their consent. 🔴 CVE-2024-6244 The plugin lacks proper CSRF...

CVE-2026-91530

A vulnerability exists in the Oracle GoldenGate Admin Client Executable affecting versions 23.4-23.26.2.0.0 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise Oracle GoldenGate. Successful exploitation may result in unauthorized acce...

CVE-2026-87351

A vulnerability exists in the Oracle GoldenGate Admin Server Executable affecting versions 19.1.0.0.0-19.32.0.0 , 21.3-21.23 , and 23.4-23.26.3.0.0 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the system, potentially resulting in a full take...

CVE-2026-101697

A vulnerability exists in the Admin Console UI component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, though the attack req...

CVE-2026-101694

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite , affecting supported versions 12.2.3-12.2.15 . A high privileged attacker with network access via HTTPS can exploit this flaw to compromise the service, potentially resultin...

CVE-2026-101692

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite . Affected versions are 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service, potentially leading to...

CVE-2026-101665

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially leading to unauthoriz...

CVE-2026-101661

The Oracle Mobile Field Service product (component: Admin UI ) within Oracle E-Business Suite is affected by a high-severity vulnerability in supported versions 12.2.3-12.2.15 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the service. ...

CVE-2026-101662

The Oracle Mobile Field Service product (component: Admin UI ) is vulnerable in supported versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation may result in unauthorized creation, deletio...

CVE-2026-101660

A vulnerability exists in the Admin UI component of the Oracle Mobile Field Service product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). This easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the service. Successf...

CVE-2026-101658

A vulnerability exists in the Admin UI component of Oracle Mobile Field Service , part of the Oracle E-Business Suite. Affected versions include 12.2.3 through 12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability to compromise the servi...

CVE-2026-101636

The Oracle Mobile Field Service product, specifically the Admin UI component within Oracle E-Business Suite , is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

CVE-2021-34646

CVE-2021-34646 PoC this vulnerability detail by NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="submit" value="...

CVE-2024-22275

CVE-2024-22275: Partial File Read in VMware vCenter Server The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Vendor...

CVE-2026-36341

Cross-Site Scripting XSS vulnerability exists in Webkul Krayin CRM HTML Injection CVE: CVE-2026-36341 Summary The vulnerability is particularly critical because it affects the Admin Panel. In many CRM workflows, managers or higher-level admins review activities logged by staff. By injecting a...