7174 matches found
CVE-2026-105831 EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105831
EspoCRM versions before 10.0.6 are vulnerable to an unauthenticated stored HTML injection vulnerability. An attacker can submit crafted data via a Lead Capture public form , which is stored in LeadCaptureLogRecord.data . When an administrator views the log record, the request body is rendered une...
EUVD-2026-95018
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2026-105831 EspoCRM before 10.0.6 Unauthenticated Stored HTML Injection via Lead Capture Form
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
CVE-2025-55182-React2Shell-Lab
CyberSec Blog CTF - React2Shell PoC Ce dépôt fournit un environnement CTF Capture The Flag vulnérable basé sur un blog de cybersécurité utilisant Next.js et React Server Components. CVE-2025-55182 : Vulnérabilité d'exécution de code à distance RCE pré-authentification dans React Server Components...
EUVD-2026-94978
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
network-forensics
Network Forensics Investigations Blue-team network-forensics...
nginx-cve-2026-42945-check
NGINX CVE-2026-42945 سكريبت الفحص المحلي اللغة: الصينية | الإنجليزية يوفر هذا المستودع سكريبتين للفحص المحلي، للتحقق من وجود مخاطر متعلقة بـ CVE-2026-42945 في Nginx وOpenResty وTengine على خوادم Linux/Windows. السكريبت يعمل فقط على جمع البيانات للقراءة فقط وتقييم محلي، ولا ينفذ PoC للثغرة، ولا ير...
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...
CLEANSTART-2026-LZ14873 Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability
Security vulnerability affects the apache-nifi-registry package. Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability...
PT-2026-107842
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine VM. This can happen when the SANnav server encounters an Out Of Memory OOM condition. The...
PT-2026-107990
EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The request body is stored in LeadCaptureLogRecord.data and rendered unescaped when administrators view the log record,...
Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-
دليل جهاز Exfiltrated - Subrion CMS-CVE-2021-2220- انظر Exfiltrated.pdf المختبر: https://portal.offsec.com/machine/exfiltrated-17398/overview/details اسم المختبر: Exfiltrated الأعلام: 2...
CVE-2021-4034-Capture-the-flag
CVE-2021-4034-التقاط-العلم عرض فيديو لالتقاط العلم: https://www.youtube.com/watch?v=1N3x23X4FMk&t=103s...
CVE-2024-21413
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 🚀 الاستخدام تأكد من حصولك على الأذونات والتفويض المناسبين من مالك النظام الهدف قبل استخدام هذا البرنامج النصي. المتطلبات الأساسية Python 3.x impacket-smbserver مثال الاستخدام sudo python3 CVE-2024-21413.py 🛠️ الميزات إرسال...
CVE-2026-102165
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...
EUVD-2026-93968
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...
CVE-2026-102165 Security Advisory 0198
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...
CVE-2026-102165 Security Advisory 0198
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...
CVE-2026-102165
Affected Arista Wi-Fi access points are vulnerable to a stack-based buffer overflow (CWE-121) within the capture service . An unauthenticated attacker with network access to this service can send a crafted packet to cause a service crash or potentially achieve remote code execution . The exploit ...