Config-Extractors

Malwares Decryptors...

CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2026-82329

JFrog Artifactory contains an authentication weakness that, under default configuration , may allow an unauthenticated attacker with network access to obtain administrative privileges . The vulnerability is rated CVSS 9.8 (Critical) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating full...

EUVD-2026-67861

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

fastjson-cve

CVE-2026-16723 प्रजनन परियोजना अवलोकन यह परियोजना CVE-2026-16723 का प्रजनन करती है — fastjson 1.2.68 से 1.2.83 में एक गंभीर रिमोट कोड निष्पादन RCE भेद्यता। यह भेद्यता डिफ़ॉल्ट कॉन्फ़िगरेशन के तहत RCE की अनुमति देती है, बिना AutoType सक्षम करने या पूर्व-मौजूद क्लासपाथ गैजेट्स की आवश्यकता के।...

CVE-2026-21008-Kubernetes-Service-Account-Token-Mounted-in-HostPath

CVE-2026-21008 – Token dell'account di servizio Kubernetes montato in HostPath Codice del programma YAML + exploit Python root@kitploit: vulnerable-pod.yaml - Pod that mounts /var/run/secrets/kubernetes.io/serviceaccount into a hostPath apiVersion: v1 kind: Pod metadata: name: sa-token-leak spec:...

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's...

SCAT

SCAT Strumento di acquisizione credenziali HP SiteScope Che cos'è? Uno strumento che sfrutta una vulnerabilità di esecuzione remota di codice nelle installazioni predefinite di HP SiteScope v11.32 e successive per rubare le credenziali memorizzate in SiteScope. Quale vulnerabilità di esecuzione...

Packages_wpa_supplicant8_CVE-2021-0326

wpasupplicant e hostapd Copyright c 2002-2019, Jouni Malinen [email protected] e collaboratori Tutti i diritti riservati. Questi programmi sono distribuiti sotto la licenza BSD quella con la clausola pubblicitaria rimossa. Se intendi inviare modifiche al progetto, consulta il file...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 Exploit per RCE alla cieca CVE-2026-25643 PoC 📜 Descrizione Questo exploit in Python colpisce una vulnerabilità critica di manipolazione della configurazione in Frigate NVR fino alla versione 0.16.3 sia nei percorsi autenticati che non autenticati. Iniettando uno stream go2rt...

CVE-2026-82266 Redpanda Admin API Unauthenticated Superuser Access via Default Configuration

Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with adminapirequireauth defaulting to false, treating unauthenticated requests as superusers. Attackers can reach port 9644 without credentials to create and delete broker accounts, modify cluster configuration, and disrupt partition...

CVE-2026-82266 Redpanda Admin API Unauthenticated Superuser Access via Default Configuration

Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with adminapirequireauth defaulting to false, treating unauthenticated requests as superusers. Attackers can reach port 9644 without credentials to create and delete broker accounts, modify cluster configuration, and disrupt partition...

CVE-2026-82266

Redpanda through 26.2.2 ships with its Admin API bound to 0.0.0.0:9644 and admin_api_require_auth defaulting to false, meaning unauthenticated requests are treated as superusers . An attacker with network access to port 9644 can create and delete broker accounts, modify cluster configuration, and...

EUVD-2026-67797

Redpanda through 26.2.2 binds the Admin API to 0.0.0.0:9644 with adminapirequireauth defaulting to false, treating unauthenticated requests as superusers. Attackers can reach port 9644 without credentials to create and delete broker accounts, modify cluster configuration, and disrupt partition...

IngressNightmare-RCE-POC

⚠️ Kritische RCE in Ingress-NGINX durch Konfigurationsinjektion CVE-2025-1974 und weitere Dieses Repository enthält einen Proof-of-Concept PoC Exploit für CVE-2025-1974 , eine kritische CVSS 9.8 Schwachstelle im Ingress-NGINX-Controller für Kubernetes. Dieser Fehler ermöglicht nicht...

CVE-2026-2699

CVE-2026-2699 — تجاوز المصادقة في Progress ShareFile Storage Zones Controller تجاوز مصادقة حرج CVSS 9.8 في Progress ShareFile Storage Zones Controller SZC المُدار من قبل العميل ≤ 5.12.3. 📋 نظرة عامة CVE-2026-2699 هو ثغرة تجاوز مصادقة شديدة الخطورة تؤثر على الواجهة الإلكترونية لـ Progress ShareFil...

CVE-2026-25049

🚨 CVE-2026-25049 – Divulgazione non autenticata delle impostazioni di n8n 📌 Panoramica CVE ID: CVE-2026-25049 Software interessato: n8n Gravità: Critica Categoria: Controllo degli accessi improprio / Divulgazione di informazioni Questa vulnerabilità consente l'accesso non autenticato ai dati di...

CVE-2012-1823

Iniezione di argomenti PHP CGI CVE-2012-1823 Descrizione sapi/cgi/cgimain.c in PHP prima della versione 5.3.12 e 5.4.x prima della 5.4.2, quando configurato come script CGI alias php-cgi, non gestisce correttamente le stringhe di query che mancano del carattere = segno di uguale, il che consente ...

EUVD-2026-67789

Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters..optic-ci.original branch name field. The expectGitBranch function in...

CVE-2026-42533

NGINX Vulnerability Checker Skript zur nicht-intrusiven Überprüfung, ob eine NGINX -Installation von der Schwachstelle CVE-2026-42533 betroffen sein könnte. Wichtig: Dieses Projekt nutzt die Schwachstelle nicht aus. Es führt lediglich lokale Prüfungen der installierten Version und der...