CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/' /...

CVE-2022-47130

CVE-2022-47130 Academy LMS history.pushState'', '', '/'...

CVE-2022-2546

All-in-One WP Migration Versioni interessate All-in-One WP Migration...

CVE-2025-24813

CVE-2025-24813 - Vulnerabilità di Path Equivalence in Apache Tomcat Apache Tomcat è vulnerabile a un problema di Path Equivalence / Path Traversal dovuto alla gestione impropria delle sequenze ../ nei percorsi. ID CVE: CVE-2025-24813 Gravità: Critica Link di riferimento:...

CVE-2022-24112

CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei-Vorlage: CVE-2022-24112.yaml Die Ausnutzung dieser Schwachstelle ähnelt im Wesentlichen der von CVE-2021-45232; in beiden Fällen wird die Autorisierung umgangen oder ohne Autorisierung vorgegangen, um bösartige filterfu...

CVE-2020-24033

L'ultima versione di fs.com S3900 24T4S 1.7.1 e tutte le versioni precedenti, CSRF backstage admin Il form non dispone di un meccanismo di autenticazione o di token di autenticazione, quindi esiste una Cross-Site Request Forgery Aggiunta account utente per aggiungere un utente con accesso complet...

CVE-2022-26923_AD-Certificate-Services

CVE-2022-26923 AD-Zertifikatdienste Veröffentlichungsdatum : 10/05/2022 Angriffskomplexität: Niedrig Erforderliche Privilegien: Niedrig CVSS-Score : 8.1 Die Schwachstelle ermöglichte es einem Benutzer mit geringen Berechtigungen, in einer Standard-Active-Directory-Umgebung mit installierter...

CVE-2023-36319

CVE-2023-36319 कंप्रेशन प्लग-इन कमांड को संशोधित करके, हमलावर अपलोड प्रक्रिया के दौरान सर्वर पर मनमाने कमांड निष्पादित कर सकता है। केवल अधिकृत सुरक्षा परीक्षण के लिए उपयोग करें, कृपया इसे अवैध उद्देश्यों के लिए उपयोग न करें। उल्लंघनों का लेखक से कोई संबंध नहीं है। प्रभावित संस्करण: openupload स्थ...

S2-046_S2-045_POC

S2-046POC Utilizzo: root@kitploit: ./s2046.sh url ./s2045.sh url Esempio: 1. chmod +x ./s2046.sh 2. ./s2046.sh http://172.16.152.135/index.action RISULTATO: root@kitploit: ================HTTP GET Method================ uid=0root gid=0root groups=0root...

Choose your fighter: Balancing competing requirements to select models for your AI SOC

Selecting a model for your security operations center SOC and digital forensics and incident response DFIR tasks is important, but selecting the best one is more involved than you might think. SOC tasks rely on a combination of model efficacy, analysis time, cost, and consistency of results. Cisc...

Exploits and vulnerabilities in Q2 2026

The vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of...

aioScan_CVE-2020-0796

aioScanCVE-2020-0796 Prefazione Basandosi sui POC pubblici, grazie all'uso delle coroutine la velocità di rilevamento è notevolmente migliorata, consentendo ai colleghi dell'operations di eseguire rapidamente scansioni sulla rete interna. Versioni interessate root@kitploit: Windows 10 Version 190...

CVE-2022-26923

CVE-2022-26923 Descrizione Questa vulnerabilità consentiva a un utente con privilegi limitati di elevare i propri privilegi ad amministratore di dominio in un ambiente Active Directory predefinito con il ruolo del server Active Directory Certificate Services AD CS installato. È principalmente...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to urllib3

Summary urllib3 is used by IBM Integrated Analytics System as an HTTP client library for Python applications. Multiple vulnerabilities affect urllib3. CVE-2026-44431 involves improper forwarding of sensitive headers during cross-origin redirects when using the low-level ProxyManager API, which...

ingressNightmare-CVE-2025-1974-exps

Ingress Nightmare CVE-2025-1907 Descrizione Questa vulnerabilità consente a un attaccante remoto di eseguire codice arbitrario sulle installazioni interessate di kubernetes/ingress-nginx. Non è richiesta autenticazione per sfruttare questa vulnerabilità. Il difetto specifico risiede nella gestion...

CVE-2026-80184

A flaw was found in OpenStack Keystone where an application credential token can escape its intended project scope through token-method reauthentication. Keystone rejects an explicit scope change for an application credential token, but an omitted scope falls through to the owner's default projec...

log4j-4255

log4j2 4255 — FilteredObjectInputStream allowlist bypass vi...

Exploit for CVE-2026-53613

CVE-2026-53613 PoC TOCTOU vulnerability in mount8 allowing...

CVE-2026-48755

A flaw was found in Incus, a container and virtual machine manager. Improper validation of backup compression settings allows argument injection, leading to arbitrary file write on the host and potential command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...

Jmeter-CVE-2018-1297-

Jmeter RMI Deserialisierungs-Schwachstelle zur Befehlsausführung CVE-2018-1297 Apache JMeter ist eine Open-Source-Software-Suite, die von der American Apache Software Foundation in Java für Stresstests und Leistungstests geschrieben wurde. Die Versionen 2.x und 3.x enthalten eine...