CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T est vulnérable à un contrôle d'accès incorrect Canal de streaming non authentifié dans la caméra dôme PTZ IP IC Realtime ICIP-P2012 version logicielle : 2.420 Le flux en direct MJPEG peut être diffusé via un canal HTTP exposé en utilisant un flux réseau VLC...

403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

CVE-2022-44877-CWP7

CVE-2022-44877-CWP7 Control Web Panel 7 CWP7 Exécution de code à distance RCE CVE-2022-44877 Non authentifié Le dépôt sera bientôt mis à jour avec un POC...

CVE-2026-78266

Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...

CVE-2026-32561

Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...

CVE-2026-27364

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

silverboxcc

Malware Android rétro-ingénié appelé Red Alert V2.0. Au moment de l'analyse, il n'y avait plus aucun serveur C2 en fonctionnement, nous n'avons donc pas pu observer de trafic entre le malware et le serveur C2. Nous avons donc compris le protocole C2 et écrit ce panneau de contrôle. Le trafic du b...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Débordement de tampon basé sur la pile x86 et x64 Débordement de tampon basé sur la pile dans R 3.4.4. Exploitation complète sur x86, mais seulement contrôle de RIP avec analyse de gadgets sur x64 en raison des contraintes du programme. La même vulnérabilité sur deux...

CVE-2026-78266 WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability

Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...

CVE-2026-78266

AutomatorWP , a WordPress plugin , is affected by a Broken Access Control vulnerability in versions ≤ 5.8.3 . The flaw allows a Subscriber -level authenticated user to perform actions beyond their expected permissions, resulting in a high integrity impact (CVSS 3.1 base score 6.5 / MEDIUM ). The ...

CVE-2026-32561 WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...

CVE-2026-27364

Broken Access Control vulnerability in the WordPress Style Kits plugin (AnalogWP) versions ≤ 2.6.5 . A Subscriber -level authenticated user can exploit insufficient access controls, resulting in a high impact on integrity (CVSS 3.1: 6.5 MEDIUM, vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No conf...

CVE-2026-27364 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-5006

A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...

CVE-2026-55468

Wagtail is an open source content management system built on Django. Prior to versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2 on their respective release lines, the internal Pages admin API returns page fields declared in apifields without sufficient access control, allowing a user with Wagtail admin...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

CVE-2025-22828

CVE-2025-22828 📜 Description Apache CloudStack 4.16.0 et versions ultérieures présentent un problème de contrôle d'accès défaillant qui permet à des utilisateurs connaissant les UUID de ressources de lire ou d'ajouter des commentaires annotations sur des ressources auxquelles ils ne sont pas...

EUVD-2026-39432

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation...

CVE-2025-39247

CVE-2025-39247 Цель: HikCentral Professional HCMP, центральный сервер VMS CVE: CVE-2025-39247 — Уязвимость контроля доступа CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Затрагиваемые версии: V2.3.1 – V2.6.2 и V3.0.0 Исправлено в: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Раскрыто: 2025-08-28...