CVE-2025-65321

CVE-2025-65321 O bot do Discord Language Sloth é vulnerável a Directory Traversal nas funções gif e png. As funções constroem caminhos de arquivo usando entrada do usuário não sanitizada para o parâmetro 'name', permitindo que atacantes referenciem arquivos fora dos diretórios de recursos...

CVE-2024-50971

CVE-2024-50971 설명 Itsourcecode Construction Management System 1.0의 print.php에서 발생하는 SQL 삽입 취약점으로, 원격 공격자가 mapid 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. 취약점 유형 SQL Injection 공급업체 Itsourcecode 영향을 받는 제품 코드 베이스:...

CVE-2024-50972

CVE-2024-50972 描述 Itsourcecode Construction Management System 1.0 的 printtool.php 中存在 SQL 注入漏洞，允许远程攻击者通过 borrowid 参数执行任意 SQL 命令。 漏洞类型 SQL 注入 产品厂商 Itsourcecode 受影响产品代码库： https://itsourcecode.com/free-projects/php-project/construction-management-system-project-in-php-with-source-code/ - 1.0 受影响组件：...

CVE-2026-40176-poc

CVE-2026-40176: Composer Perforce OS-Befehlseinschleusung PoC English version Übersicht Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-40176 , die im Perforce VCS-Treiber von Composer vorhanden ist. Die Schwachstelle betrifft...

CVE-2023-28432

CVE-2023-28432 Vulnerabilità di divulgazione di informazioni sensibili nell'interfaccia verify di MinIO CVE-2023-28432 Nome cinese: MinIO verify 接口敏感信息泄露漏洞（CVE-2023-28432） Descrizione : MinIO è un servizio di storage a oggetti open source compatibile con l'API Amazon S3, utilizzabile in cloud...

gadgetinspector

Gadget Inspector Questo progetto ispeziona librerie Java e classpath alla ricerca di catene di gadget. Le catene di gadget sono utilizzate per costruire exploit per vulnerabilità di deserializzazione. Scoprendo automaticamente possibili catene di gadget nel classpath di un'applicazione, i...

CVE-2024-40815

CVE-2024-40815 POC für CVE-2024-40815 Die Entwicklung befindet sich in der Endphase ==IOS 17.0...

CVE-2023-40448

CVE-2023-40448 poc für CVE-2023-40448 in Bearbeitung , dies könnte wahrscheinlich ein Teil für einen Jailbreak sein...

CVE-2019-1619

CVE-2019-1619 Script Powershell per costruire il token necessario per il Bypass dell'Autenticazione. Ero in un pentest e ho trovato un server vulnerabile a CVE-2019-1619. Non ho potuto utilizzare il modulo metasploit a causa dell'accesso limitato, quindi l'ho sfruttato manualmente. Ho creato ques...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – संपर्क फ़ॉर्म में SMTP हेडर इंजेक्शन प्रोग्राम कोड Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender = request.form'email'...

PT-2026-81394

The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...

JavaDeRe

Introduzione al progetto Utilizzato principalmente per codificare in base64 la classe durante la costruzione di payload di echo per la deserializzazione Java e, in situazioni di emergenza, per decodificare stringhe base64 e ripristinare il file class, consentendo di esaminare il payload...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-54284

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by groupparenthesis and groupcase, causing quadratic CPU consumption through sqlparse.parse,...

CVE-2026-72104

The CVE-2026-72104 entry concerns the Linux kernel component dm-pcache (pcache target). The vulnerability arises when optional arguments are parsed as name/value pairs and a table advertises an option (e.g., cache_mode) but provides only the option name; after consuming the name, the parser decre...

CVE-2026-72104 dm-pcache: reject option groups without values

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

PT-2026-72293

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cache mode",...

GHSA-H84G-69H7-MW6V mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"

Impact Prior to version 0.6.0, mchange-commons-java includes a JNDI ObjectFactory implementation com.mchange.v2.naming.JavaBeanObjectFactory willing to construct objects of arbitrary classes and initialize "JavaBean"-style properties. There are classes for which this kind of initialization is...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

EUVD-2026-58790

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...