CVE-2026-55168

CVE-2026-55168 Этот репозиторий содержит простой PoC для CVE-2026-55168 в Runtipi. Проблема представляет собой аутентифицированную произвольную запись файла, которую можно достичь через процесс восстановления из резервной копии. Специально сформированный архив резервной копии может внедрить симли...

Le Panthéon de la Souveraineté

🏠 Développé sur : GitLab | 🪞 Miroir automatisé sur : GitHub 🏛️ Le Panthéon de la Souveraineté Une infrastructure cloud 100% souveraine, redondante et sécurisée, conçue pour s'affranchir totalement des GAFAM. Version 1.1 : Socle réseau privé, chiffrement des requêtes DNS des serveurs DoT et...

WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin StifLi Backup Tools versions = 2.2.7...

CVE-2026-102241

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

EUVD-2026-88607

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241 Netcore NAP930 Backup/Restore backup_common.sh hard-coded key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

CVE-2026-102241

The Netcore NAP930 (version 0.1.241010.141410) contains a vulnerability in the Backup/Restore component, specifically within the /lib/functions/backup_common.sh file. Manipulation of the aes_pass argument leads to the use of a hard-coded cryptographic key . This vulnerability can be initiated rem...

Cve-2026-27944-Tools-Exploit

🚀 CVE-2026-27944: Exploitation de sauvegarde non authentifiée de Nginx UI 📌 Description 27944.py est un outil d'exploitation pour CVE-2026-27944 qui permet à un attaquant de télécharger et décrypter la sauvegarde de Nginx UI sans authentification. Cette vulnérabilité se trouve dans Nginx UI versi...

watchTowr-vs-Splunk-CVE-2026-20253

CVE-2026-20253 RCE pré-authentification Splunk Outil générateur d'artefacts de détection pour RCE pré-authentification Splunk 1day Détection en action Le générateur d'artefacts de détection tente d'accéder au point de terminaison /v1/postgres/recovery/backup du service PostgreSQL Sidecar pour...

CVE-2026-102241: Use of Hard-coded Cryptographic Key

A vulnerability was determined in Netcore NAP930 0.1.241010.141410. This vulnerability affects unknown code of the file /lib/functions/backupcommon.sh of the component Backup/Restore. This manipulation of the argument aespass causes use of hard-coded cryptographic key . It is possible to initiate...

PT-2026-102436

Name of the Vulnerable Software and Affected Versions Netcore NAP930 version 0.1.241010.141410 Description An issue exists in the Backup/Restore component within the /lib/functions/backup common.sh file. The manipulation of the aes pass argument leads to the use of a hard-coded cryptographic key,...

CVE-2026-27944

CVE-2026-27944 - Téléchargement et déchiffrement non authentifiés de sauvegarde Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red Une preuve de concept PoC pour CVE‑2026‑27944, une vulnérabilité...

CVE-2021-27877-PoC

CVE-2021-27877 Preuve de concept Ce dépôt contient une version modifiée du module Metasploit original de Rapid7 pour CVE-2021-27877 affectant l'agent Veritas Backup Exec. Lors de mes tests, le module Metasploit original a bien identifié la cible comme vulnérable mais a systématiquement échoué à...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker создаёт резервные копии ключей восстановления BitLocker и проверяет CVE-2026-45585 в Windows 10/11. yellowkey github search ведёт сюда. Портативный CLI + GUI для томов, которыми вы управляете. Что нового в v2.2 27 сентября 2026 г. Более быстрое перечисление...

CVE-2021-24155.rb

WordPress-Backup-RCE Ce module Metasploit permet à un attaquant disposant d'un compte WordPress privilégié de lancer un reverse shell en raison d'une vulnérabilité de téléchargement arbitraire de fichier dans le plugin WordPress Backup Guard versions antérieures à 1.6.0. Cela est dû à une...

CVE-2026-54708

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2026-54708

The FreePBX open source IP PBX contains a critical vulnerability in the backup Module affecting versions prior to 16.0.72 and 17.0.7 . The root cause is improper path sanitization within the backup restore functionality. This flaw allows authenticated attackers with sufficient permissions or writ...

CVE-2026-54708 Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2026-54708 Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...