266003 matches found
CVE-2026-114388 Chamilo LMS 2.0.0-alpha.1 before 2.0.0-RC.3 Missing Authorization via GradebookController
Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows unauthenticated users to modify gradebook certificates. Attackers can request the setdefaultcertificate endpoint with any course id and document id...
CVE-2023-22855
CVE-2023-22855 This vulnerability was discovered and disclosed by Nico Viakowski and myself. This repository will hold the advisory and the exploit. This repository is only for educational purposes. Links Vendor Website: https://www.kardex.com/en/mlog-control-center Exploit on Exploit-DB:...
CVE-2026-74758
A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...
EUVD-2026-107223
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
CVE-2026-84747
Apache bRPC (versions
CVE-2026-84747 Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments
Interpretation conflict in the HTTP protocol implementation in Apache bRPC version 1.18.0 on all platforms allows remote attackers to bypass access control rules enforced by a front proxy. Root Cause: The method dispatch function FindMethodPropertyByURI in bRPC's HTTP protocol splits the request...
Security Bulletin: SOAR App Host is vulnerable to using components with known vulnerabilities (CVE-2026-61308, CVE-2026-70907, CVE-2026-60589)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. SOAR APP host has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows...
CVE-2026-82210 Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames
Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled curbufsize == 0, reaches these...
CVE-2026-82210
Apache bRPC versions earlier than 1.18.0 are vulnerable to a Remote Denial of Service (DoS) via a reachable assertion (CWE-617 ). The issue occurs in the streaming feature when the server handles FRAME_TYPE_FEEDBACK frames. Specifically, the Stream::SetRemoteConsumed() function contains assertion...
CVE-2026-74758
Apache bRPC (versions
CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling
A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...
EUVD-2026-107182
A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...
agent_tesla_panel_rce
agentteslapanelrce This module exploit the command injection vulnerability in control center of the agent Tesla. Setup Resources for testing are available here: https://github.com/mekhalleh/agentteslapanelrce/tree/master/resources Windows For WebPanel1.7z unauthenticated RCE, I used WAMP server...
0net
0net: Simple Windows Remote Control Backdoor Introduction: 0net is a simple Windows remote control backdoor program. The client is written in C++ and compiled with VC++6.0. The server is written in Python and is cross-platform. The project is currently under development... Project details:...
CVE-2022-31269
CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...
cve-2020-13933
cve-2020-13933 cve-2020-13933 Apache Shiro privilege bypass vulnerability This reproduction is very simple. First, set up the environment using IDEA + Shiro Reference: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Then run, access, and capture packets...
WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WPMobile.App versions = 11.86...
WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ravenska Dhigna Manggala in WordPress Plugin Knit Pay versions = 9.6.3.0...
WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ravenska Dhigna Manggala in WordPress Plugin Car Rental Manager versions = 1.5.3...