CVE-2025-47445-PoC

Preuve de concept CVE-2025-47445 Cette preuve de concept est basée sur un devoir scolaire où nous voulions trouver un plugin wordpress vulnérable et tester ladite vulnérabilité dans un environnement local contrôlé. Info| ---|--- Plugin Wordpress:| Wordpress Eventin Version du plugin:| 4.0.26 ou...

secuimag3a

A partir d’une faille ou d’une vulnérabilité soit proposée par l’enseignant, soit choisie par vos soins qui doit être en rapport avec le thème proposé: Indiquer quel est le service ou le programme compromis, quel est le type de compromission Expliquer la vulnérabilité, décrire le mécanisme...

CVE-2025-2304-POC

CVE-2025-2304-POC PoC manuel pour CVE-2025-2304 : Camaleon CMS Version 2.9.0 Étapes d'exploitation 1. Connectez-vous en tant qu'utilisateur à faibles privilèges par exemple « Bob ». 2. Interceptez le changement de mot de passe à l'aide d'un proxy par exemple Burpsuite, caido, etc.. 3. Capturez la...

CVE-2025-54782

CVE-2025-54782 PoC для CVE-2025-54782 в целях выполнения задания...

CVE-2023-7028

GitLab CVE-2023-7028 POC [email protected]&[email protected] 科研机构base成都-招聘网络安全研究人员（私）...

HTB-Facts-Writeup

HackTheBox — Write-up de la machine Facts Informations sur la machine Champ| Détails ---|--- Nom| Facts Système d'exploitation| Linux Difficulté| Facile Sortie| Saison 10 Retirée| Non Aperçu de la chaîne d'attaque Reconnaissance → Énumération Web → CVE-2025-2304 Mass Assignment → Fuite...

djust: Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler

Impactdjust.mixins.modelbinding.ModelBindingMixin provides a default updatemodel event handler and is part of the LiveView base MRO, so every LiveView exposes it. It setattrs a view attribute whose name is client-supplied field, gated only by: reject -prefixed names; reject a 14-entry denylist of...

CVE-2026-62183

CVE-2026-62183 — повышение привилегий через пользовательский self-service в Apache Syncope Неправильное управление привилегиями CWE-269 в Apache Syncope. Прошедший аутентификацию пользователь с низкими привилегиями может назначить себе произвольные роли а также членство в группах, внешние ресурсы...

CVE-2026-102093

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full...

CVE-2026-102129

A privilege escalation vulnerability exists in the user-provisioning interface of Kiteworks Core . The root cause is a failure to verify if the requesting administrator possesses the authorization required to grant specific roles. Consequently, an administrator with limited permissions for role c...

CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

USN-8854-1 keystone vulnerabilities

Grzegorz Grasza discovered that OpenStack Keystone did not consistently enforce restrictions for delegated authentication tokens. An authenticated attacker could possibly use this issue to create credentials or delegations that outlasted the delegated token. CVE-2026-80182 It was discovered that...

CVE-2026-103114

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103114 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103114

A SQL injection vulnerability exists in OS4ED openSIS-Classic up to version 9.3 . The flaw is located in the Assignment Management Endpoint within the DBQuery_assignment function of the modules/grades/Assignments.php file. An attacker can remotely initiate the attack by manipulating the Tables ar...

CVE-2026-103114 OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

EUVD-2026-89777

A vulnerability was identified in OS4ED openSIS-Classic up to 9.3. The impacted element is the function DBQueryassignment of the file modules/grades/Assignments.php of the component Assignment Management Endpoint. The manipulation of the argument Tables leads to sql injection. It is possible to...

CVE-2026-103235

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...

CVE-2026-103235 MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events

MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...