EUVD-2026-66834

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash BSOD or BIOS corruption via a crafted software SMI SW SMI request with an oversized length value.Refer to the ' Security Update for...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 Un semplice script bash per l'exploit di CVE-2023-22515. Informazioni Le istanze Confluence Data Center e Server presentano una vulnerabilità di controllo degli accessi non corretto CVE-2023-22515, che consente agli attaccanti di creare account amministratore Confluence non...

CVE-2023-7028

CVE-2023-7028 | GitLab 账户接管 免责声明 此代码是该漏洞的概念验证，我不鼓励任何人将其用于他们不拥有的 GitLab 实例。 此工具仅用于研究和教育目的，对于您使用它可能产生的任何后果，我不承担任何责任。 描述： CVE-2023-7028 是一个账户接管漏洞，允许用户在无需交互的情况下控制 GitLab 管理员账户。 该漏洞存在于重置密码时的电子邮件管理机制中。攻击者可以提交两个电子邮件地址，重置代码将同时发送到这两个地址。 因此，可以提供目标账户的电子邮件地址以及攻击者的电子邮件地址，然后重置管理员密码。 GitLab...

CVE-2026-37068

An arbitrary file write vulnerability in Veno File Manager Project 4.4.9 affects the endpoint /vfm-admin/index.php?section=translations&action=update. An authenticated user holding the super administrator role can overwrite any PHP file in the application by sending a specially crafted POST reque...

PT-2026-82807

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...

cve-2023-40000

cve-2023-40000 이것은 cve-2023-40000의 PoC입니다. Wordpress LiteSpeed Cache 익스플로잇입니다. 이 CVE는 모든 LiteSpeed Cache --------------------+"; echo "+----------------------------------------------------------------------+";...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module

LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...

CVE-2026-55182

LibreNMS , a network monitoring system, is vulnerable to command injection in the Signal alert transport module (versions 21.6.0 through 26.5.0). The root cause lies in insufficiently escaped signal-cli path and Recipient field in the deliverAlert function of Signal.php, which are passed to unsaf...

CVE-2026-37068

CVE-2026-37068 Scrittura arbitraria di file in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 consente a un utente autenticato con il ruolo di super amministratore di sovrascrivere qualsiasi file php nell'applicazione tramite una richiesta POST...

cve-2023-22515-1

🛡️ CVE-2023-22515: Analisi approfondita della vulnerabilità di escalation dei privilegi in Confluence !IMPORTANT Avviso di sicurezza urgente : questa vulnerabilità ha un punteggio CVSS 10.0 Critical , il massimo livello di rischio. Se si utilizza una versione interessata, è necessaria una patch...

CVE-2020-18326

Subrion CMS 4.2.1 - Cross Site Request Forgery CSRF Aggiunta di un utente amministratore Descrizione Subrion CMS è facile da installare e semplice da gestire. Utilizzalo come applicazione autonoma o in combinazione con altre applicazioni per creare siti di livello base, siti di medie o grandi...

CVE-2020-5377

CVE-2020-5377 CVE-2020-5377: Dell OpenManage Server Administrator Leitura de Arquivos root@kitploit: Usage: python3 CVE-2020-5377.py :...

CVE-2026-61792

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2023-42793

CVE-2023-42793 - Creazione username amministratore Esempio di esecuzione di comandi: root@kitploit: python3 exploit.py -u http://localhost User add token - eyJ0eXAiOiAiVENWMiJ9.YkZ0V2tzR3NvWXhZelRfZTN0cFF1SkZjVWVz.N2M0Njk2ZTgtNWZhYi00MTU5LWJmZjQtYWU1MDFlYzZiMGY1 Successful execution, preparing fo...

CVE-2022-30190

CVE-2022-30190 Mitigazione per CVE-2022-30190 Lo script richiede l'esecuzione come amministratore. Questo script è stato testato con lo strumento RMM Connectwise Automate per il deployment. Ho trovato questa soluzione più pulita rispetto al backup e alla cancellazione di elementi dal registro,...

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2026-61792

Weblate , a web-based continuous localization platform, is affected by a path traversal vulnerability in its App store metadata download feature (versions prior to 2026.7 ). Attacker-influenced paths are resolved without adequate confinement to the repository, allowing a user with project-adminis...

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2026-81031

IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js resolves the authenticated user from the request that the token middlewa...