CVE-2026-19892

The InfusedWoo Pro WordPress plugin (all versions up to 5.1.17 ) is vulnerable to Privilege Escalation via Account Takeover due to a missing capability check in the ajax_iwar_preview_email() function, which relies solely on is_admin() for authorization. An authenticated attacker with subscriber-l...

EUVD-2026-65275

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajaxiwarpreviewemail function, which uses isadmin as its only authorization check and allows...

CVE-2021-21985

CVE-2021-21985 Il client vSphere HTML5 contiene una vulnerabilità di esecuzione remota di codice dovuta alla mancanza di convalida dell'input nel plug-in Virtual SAN Health Check, abilitato per impostazione predefinita in vCenter Server. VMware ha valutato la gravità di questo problema...

CVE-2011-4862

CVE-2011-4862 Progetto finale per Security and Privacy CS 600.443 | Autunno 2018 Ho inizialmente provato a usare diff per creare una patch. Ho creato la patch nel modo in cui pensavo dovesse essere, prima di guardare la patch reale. encrypt.patch è questa patch originale che ho creato con diff...

cups-script-final-project

Cosa fa Strumento di rilevamento in due fasi per CVE-2025-58060, vulnerabilità di bypass dell'autenticazione nel Common UNIX Printing System CUPS. Invece di affidarsi ai soli numeri di versione, lo strumento combina un controllo della versione basato sul banner con una sonda attiva di bypass...

DolibabyPhp

DolibabyPhp Ein authentifizierter RCE-Exploit für Dolibarr ERP/CRM CVE-2023-30253. Installation Du kannst das Paket entweder aus dem PyPi-Repository mit pip installieren oder den Quellcode direkt von GitHub mit git clone klonen. root@kitploit: pip install dolibabyphp Verwendung root@kitploit:...

windows-security-cve-2017-8543

Exemplo de Perfil InSpec Este exemplo mostra a implementação de um perfil do InSpec...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload Beschreibung Das Plugin GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor für WordPress ist aufgrund einer fehlenden Berechtigungsprüfung in der Funktion installandactivatepluginfromexternal...

FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions

Problem Description: When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. Impact: An unprivileged local user who has attached PMCs to a process can...

CVE-2026-17543-PHP-Exposure-Validator

Validatore di esposizione PHP CVE-2026-17543 Validator sicuro lato rete per verificare la potenziale esposizione a PHP CVE-2026-17543. Questo progetto verifica se un server web remoto espone una versione di PHP interessata da CVE-2026-17543 e può opzionalmente eseguire sonde non distruttive sui...

reflector

reflector Description Burp Suite extension is able to find reflected XSS on page in real-time while browsing on web-site and include some features as: Highlighting of reflection in the response tab. Test which symbols is allowed in this reflection. Analyze of reflection context. Content-Type...

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud nicht validiert Ausführbarer Proof-of-Concept-Reproduktor für die Apache-Camel-Schwachstelle, bei der der in camel-main eingebettete HTTP-Server seinen JWT-Authentifikator allein aus einem Keystore erstellt, wenn weder jwtIssuer noch jwtAudien...

CheckPoint-CVE-Webscanner

CVE Web Check Eine lokale Web-App mit Freigabeprozess zum Scannen und Beheben potenzieller Expositionen im Zusammenhang mit Check Point CVE-2026-50751 und CVE-2026-50752 mithilfe vertrauenswürdiger Check-Point-Management-API-Befehle. Dieses Tool wurde nicht von Check Point erstellt oder unterstüt...

CVE-2022-35841

CVE-2022-35841 Dies ist nur eine kleine Zusammenfassung mit der Theorie, da dieser Bug kollidiert wurde und ich nie dazu kam, ihn ordentlich zu testen. EnterpriseAppMgmtSvc ist ein interessanter Dienst, der COM-Objekte implementiert. Scheint aus der Windows-Phone-Ära zu stammen, und tatsächlich...

eternal_check

Eternal Check 2.0 Eternal Check verifies if an ip is vulnerable to the smb vulnerabilities Eternal Blue Eternal Romance Eternal champion Eternal synergy Erraticgopher SMB v1 Exploit Windows XP & Server 2003 Eagerlever SMB v1 Exploit Windows XP & 2000 Screenshots Added in 2.0 Architouch uses port...

CVE-2026-59640

A flaw was found in Bouncy Castle for Java. A remote attacker can exploit an OpenPGP Open Pretty Good Privacy Cipher Feedback CFB quick-check oracle vulnerability. This oracle, active on symmetric and session-key paths, could allow an attacker to gain sensitive information by observing the result...

CVE-2024-3094-Checker

CVE-2024-3094-Checker Das Repository enthält eine Prüfdatei, die bestätigt, ob Ihre xz-Version und das xz-utils-Paket für CVE-2024-3094 anfällig sind. Haftungsausschluss: 1. Dieses Skript wird ohne jegliche Garantie, weder ausdrücklich noch stillschweigend, bereitgestellt. 2. Durch die Wahl, dies...

CVE-2025-57819-ioc-check

CVE-2025-57819-ioc-check Descrição O CVE-2024-6387-ioc-check é uma ferramenta leve e eficiente projetada para identificar IoCs em servidores FreePBX com qualquer um dos módulos endpoint Os usuários devem atualizar para as versões suportadas mais recentes do FreePBX atualmente 15, 16 e 17 e...

cisco-sa-sma-attack-N9bf4

Cisco SMA Exposure-Check Kleines Python-3-Skript in einer einzigen Datei zum schnellen Überprüfen eines Hosts oder einer Domain auf offene Verwaltungs- und Quarantäne-Ports von Cisco Secure Email/Secure Malware Analytics Expositionsindikatoren zu CVE-2025-20393. Verwendung Installieren Sie Python...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::addopaque omits the checknometavarnofvar call that the definition and theorem paths perform, so a value containing a free variable that is absent from the local context is not rejected outright. A...