Vulnerabilities in Apache CloudStack

Apache has identified several vulnerabilities in Apache CloudStack, specifically in versions 4.12.0.0 through 4.22.1.0. These vulnerabilities include OS command injection in the NAS backup provider plugin, Server-Side Request Forgery SSRF in various modules such as metalink mirror URL resolution...

BIT-NEO4J-ENTERPRISE-2026-1497 Incorrect privilege assignment in composite databases

Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intends to give a user an access to a remote database constituent "namespace.name" will inadvertently grant access to any...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Software

Summary Multiple vulnerabilities were addressed in IBM Concert Software version 3.0.0 Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular...

vulnerabilities in Adobe Campaign Classic

Adobe has identified several vulnerabilities in Adobe Campaign Classic. These vulnerabilities involve Server-Side Request Forgery SSRF and OS Command Injection. The SSRF vulnerability allows attackers to manipulate requests on the server, which can lead to the execution of arbitrary code without...

CVE-2021-45897

CVE-2021-45897 PoC per CVE-2021-45897 noto anche come SCRMBT-180 - RCE tramite modelli email solo utenti autenticati in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 – OpenCode Unauthenticated RCE Nuclei-Vorlage zum Scannen. Burp-Suite-Anfrage root@kitploit: POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 root@kitploit: POST /session/"id"/shell...

Vulnerabilities found in Ubiquiti’s UniFi products

Ubiquiti has identified vulnerabilities in various UniFi products, including UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge, and UniFi Talk. The...

exploit-CVE-2026-23744

exploit-CVE-2026-23744 MCPJam Inspector ist eine lokale Entwicklungsplattform für MCP-Server. In Version 1.4.2 und früher ermöglicht ein RCE-Fehler Angreifern, manipulierte HTTP-Anfragen zu senden, die einen MCP-Server installieren und Code remote ausführen, da der Dienst standardmäßig auf 0.0.0....

promptfoo v0.122.1

Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation · Discord Promptfoo is now part of OpenAI. Promptfoo...

tapo-c260-rce

Catena RCE Tapo C260 CVE-2026-0651 / CVE-2026-0652 / CVE-2026-0653 Proof-of-concept della catena di exploit per la telecamera IP TP-Link Tapo C260 che consente di ottenere RCE da non autenticato a root concatenando tre vulnerabilità scoperte da Eugene Lim Spaceraccoon. Crediti Tutta la ricerca e ...

enseal

enseal Condivisione sicura e effimera di segreti per sviluppatori. Smetti di incollare segreti su Slack. enseal rende il percorso sicuro più veloce di quello insicuro — condividi file .env e segreti attraverso canali crittografati e monouso con un solo comando e zero configurazione.bash sender $...

CVE-2026-39842

CVE-2026-39842: Iniezione di Espressioni in OpenRemote - RCE nel Rules Engine TL;DR Vulnerabilità critica di esecuzione remota di codice nel Rules Engine di OpenRemote che consente agli utenti autenticati con ruolo write:rules di eseguire codice arbitrario sul server con privilegi di root...

CVE-2025-1338

CVE-2025-1338 Questo repository contiene uno script proof-of-concept per l'exploit di CVE-2025-1338 1.Introduzione alla NUUO-Camera La NUUO camera è un videoregistratore di rete NVR prodotto dalla società NUUO nella provincia di Taiwan, in Cina. È ampiamente utilizzata in molti settori come vendi...

-CVE-2021-4034

-CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt " "Polkit precedentemente PolicyKit è un componente per il controllo dei privilegi a livello di sistema nei sistemi operativi simili a Unix. Fornisce un modo organizzato per i processi non privilegiati di comunicare con...

CVE-2026-81573 Improper Access Control in Local-Only Configuration Commands

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

CVE-2026-81573

CodeMeter Runtime versions before 8.41a or 9.10 are affected when configured as a server. The configuration command handler fails to enforce network-origin restrictions, allowing arbitrary remote peers to execute commands intended only for local or same-network clients. This enables reading sensi...

CVE-2026-81573 Improper Access Control in Local-Only Configuration Commands

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

EUVD-2026-66980

If CodeMeter Runtime before 8.41a or 9.10 is configured as a server, the configuration command handler does not enforce network- origin restrictions. Commands intended only for local or same-network clients can therefore be executed by arbitrary remote peers. An attacker can read potentially...

Centreon-Exploits-2026

Exploit per CVE-2026-2749, CVE-2026-2751 e CVE-2026-2750 Questo repository contiene exploit per CVE-2026-2749, CVE-2026-2751 e CVE-2026-2750 in Centreon, che sfruttano vulnerabilità di Path Traversal, SQL Injection e Command Injection. Versioni Vulnerabili Tutte le versioni precedenti alla 25.10...

atril_cbt-inject-exploit

CVE-2023-44452, CVE-2023-51698: Linux Mint Xreader/MATE Atril CBT-Datei-Parsing-Argument-Injection-Remote-Code-Execution-Schwachstelle Eine kritische One-Click-RCE/Command-Injection-Schwachstelle, die gängige Linux-Betriebssysteme mit MATE-, Cinnamon- und einigen Xfce-Desktop-Umgebungen betrifft...