CVE-2026-105130

LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many concurrent registration requests from one IP so all pass...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” involves bypassing authentication by using an alternative path or channel, allowing attackers to circumvent existing security mechanisms.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

CVE-2026-105130 LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily registration limit. Attackers can send many concurrent registration requests from one IP so all pass...

CVE-2026-105130

LaraDashboard versions 1.4.0 before 1.4.8 are vulnerable to a race condition (CWE-367) within the RegisterController::register function. This flaw allows unauthenticated attackers to bypass the per-IP daily registration limit by sending multiple concurrent requests. Because the requests reach Reg...

CVE-2026-103065

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

CVE-2026-96451

The Ultimate Member WordPress plugin, versions through 2.13.1 , is vulnerable to a Privilege Escalation issue due to an Authorization Bypass Through User-Controlled Key (CWE-639). This vulnerability allows an attacker to escalate privileges within the system. While specific exploit code and a dir...

EUVD-2026-92042

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1...

CVE-2025-29927

CVE-2025-29927 Уязвимость обхода прав доступа Next.Js CVE-2025-29927 Больше POC по адресу: https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X path по умолчанию /, многопоточность по умолчанию 10 Массовая проверка: python poc.py -f url.txt -p /path -t 10 Одиночная проверка: python poc.py -u...

trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass 2023년, Trellix는 CVE-2007-4559라는 오래된 경로 순회path traversal 취약점에 대해 +61,000개의 오픈소스 프로젝트를 패치했다고 발표했습니다 1. 그들의 패치를 분석해 보면 심볼릭 링크symlink를 사용해 우회할 수 있다는 것을 쉽게 알 수 있습니다. 심볼릭 링크 경로 순회는 오래된 기법이며, LiveOverflow의 영상 Critical .zip vulnerabilities? - Zip Slip and ZipperDown에서도 소개된 바...

powershell-reverse-tcp

PowerShell Reverse TCP Скрипты PowerShell для связи с удаленным хостом. Удаленный хост получает полный контроль над клиентом и всеми системными командами. Доступны оболочки на основе: команды PowerShell Invoke-Expression здесь, каналов процессов здесь. Протестировано с PowerShell v5.1.19041.2673 ...

phantun

Phantun A lightweight and fast UDP to TCP obfuscator. Table of Contents Phantun Latest release Overview Usage 1. Enable Kernel IP forwarding 2. Add required firewall rules Client Using nftables Using iptables Server Using nftables Using iptables 3. Run Phantun binaries as non-root Optional 4...

VcenterKiller

VcenterKiller -1. Внимание Если вы собираете локальную среду для эксплуатации уязвимостей с помощью vckiller для проверки log4j, в большинстве случаев это не сработает, поскольку в среде VMware с сетевым режимом NAT исходящий сетевой интерфейс модуля проверки будет определяться как 127.0.0.1, и...