python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

Dirty-Pipe-Exploits

CVE-2022-0847 Exploits Dirty Pipe ما هو؟ تم الكشف عنها في 7 مارس 2022 بواسطة Max Kellerman2، CVE-2022-0847 هي ثغرة في نواة لينكس الإصدارات بين 5.8 و 5.16.11 تسمح للمهاجمين باستبدال الملفات القابلة للقراءة فقط أو غير القابلة للتغيير ورفع صلاحياتهم على نظام الضحية. أُطلق على CVE-2022-0847 اسم Dirty...

CVE-2024-56116

CVE-2024-56116 Descrizione suggerita Una vulnerabilità di Cross-Site Request Forgery in Amiro.CMS precedente alla versione 7.8.4 consente a un attaccante remoto di creare un account amministratore. Tipo di vulnerabilità CWE-352 | Cross-Site Request Forgery CSRF Venditore del prodotto Amiro.CMS...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Front and back end - Pages in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2002-0348

CVE-2002-0348 service.cgi in Cobalt RAQ 4 consente ad attaccanti remoti di causare un denial of service Pubblicazione Packetstorm all'indirizzo https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html Pubblicazione SecurityFocus all'indirizzo https://www.securityfocus.com/bid/4209 Auto...

CVE-2002-0346

CVE-2002-0346 Vulnerabilità di cross-site scripting in Cobalt RAQ 4 consente a un attaccante remoto di eseguire script arbitrari come altri utenti Cobalt tramite Javascript in un URL verso 1 service.cgi o 2 alert.cgi. Pubblicazione Packetstorm su...

CVE-2025-24071

CVE-2025-24071 CNA: Microsoft Corporation Pubblicato: 2025-03-11 Aggiornato: 2025-03-13 Titolo: Vulnerabilità di spoofing in Esplora file di Microsoft Windows Descrizione L'esposizione di informazioni sensibili a un attore non autorizzato in Esplora file di Windows consente a un utente...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server für Windows 0.1 erlaubt es entfernten Angreifern, einen Denial of Service über eine HTTP-Anfrage für einen MS-DOS-Gerätenamen zu verursachen. Externe Referenz unter https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez alias @alt3kx...

PT-2026-81524

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81755

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-81632

Incorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81540

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81804

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-81723

Information leak in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-81547

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations

ConcreteCMS XSS v2.2.18 Autor: Sergio Beschreibung: Eine Cross-Site-Scripting-Schwachstelle in ConcreteCMS v.9.2.1 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Plural Handle der Data Objects unter System & Settings auszuführen. Angriffsvektoren: Skriptin...

CVE-2026-5006

HashiCorp Vault and Vault Enterprise are vulnerable to privilege escalation via slash injection in templated policy paths . An authenticated attacker who can control an identity value referenced by a templated policy can embed / characters, which Vault interprets as additional path segments when ...

CVE-2026-5006 Vault Vulnerable to Privilege Escalation via Slash Injection in Templated Policy Paths

A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...

CVE-2026-74724

A flaw was found in the Linux kernel's IPVS IP Virtual Server component. A local attacker can exploit this vulnerability by manipulating packets processed by IPVS, specifically within the ipvsnaticmp function. This manipulation can lead to an out-of-bounds write due to improper handling of the IP...

CVE-2026-74723

A flaw was found in the Linux kernel. A local attacker could craft a btrfs image with a malformed LZO compressed file extent. This could lead to an out-of-bounds read during decompression, potentially causing a denial of service...