dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

CVE-2026-76816 Netty: MQTT Topic Name and Client ID Validation Bypass

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null bytes in MQTT UTF-8 string fields and...

CVE-2026-76816

Netty , an asynchronous event-driven network framework, contains a validation bypass in its MqttEncoder prior to versions 4.1.137.Final and 4.2.17.Final . The encoder fails to validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null by...

CVE-2025-69581

CVE-2025-69581 تم اكتشاف مشكلة في Chamillo LMS 1.11.2. يعرض نقطة النهاية /personaldata الخاصة بالشبكة الاجتماعية معلومات حساسة كاملة للمستخدم حتى بعد تسجيل الخروج بسبب عدم وجود تحكم مناسب في التخزين المؤقت cache-control. يؤدي استخدام زر الرجوع في المتصفح إلى استعادة جميع البيانات الشخصية، مما يسم...

CVE-2025-65672

CVE-2025-65672 कक्षाआईओ 0.1.13 में असुरक्षित प्रत्यक्ष ऑब्जेक्ट संदर्भ IDOR पाठ्यक्रम सेटिंग्स में अनधिकृत शेयर और आमंत्रण पहुंच की अनुमति देता है। प्रभावित उत्पाद: ClassroomIO प्रभावित संस्करण: 0.1.13 द्वारा खोजा गया: Rivek Raj Tamang RivuDon, सिक्किम, भारत भेद्यता विवरण असुरक्षित प्रत्यक्ष...

CVE-2025-65670

CVE-2025-65670 classroomio 0.1.13 में एक असुरक्षित प्रत्यक्ष ऑब्जेक्ट संदर्भ IDOR छात्रों को URL में कोर्स आईडी में हेरफेर करके संवेदनशील एडमिन/शिक्षक एंडपॉइंट्स तक पहुँचने की अनुमति देता है, जिसके परिणामस्वरूप संवेदनशील कोर्स, एडमिन और छात्र डेटा का अनधिकृत प्रकटीकरण होता है। लीक सिस्टम के सामान...

CVE-2023-23752

Joomla! options तर्क...

EUVD-2026-65086

Dell ThinOS 10, versions prior to 260510.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-61419

Dell ThinOS 10, versions prior to 260510.2518, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-61419

Dell ThinOS 10 versions prior to 2605_10.2518 are affected by an Improper Access Control vulnerability. A low-privileged attacker with local access can exploit this flaw to gain unauthorized access , resulting in high impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , ve...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-71505

Dolibarr before 24.0.0 is affected by a Broken Object-Level Authorization (BOLA) vulnerability in the REST API third-party site account write routes . Per-object access checks are enforced only on read routes, leaving write endpoints unguarded. An authenticated attacker holding third-party creati...

CVE-2026-39975

Combodo iTop , a web-based IT service management tool, is vulnerable to remote code execution prior to version 3.2.3 . The root cause involves the ability of unauthenticated users to delete the .readonly file , which is created during setup to prevent write actions on the instance. Per the CVELIS...

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster लेखक: Letda Kes dr. Sobri, S.Kom. HTTP 401/403 प्रतिक्रियाओं को बायपास करने के लिए एक पेनिट्रेशन टेस्टिंग टूल, जो विभिन्न हेडर मैनिपुलेशन तकनीकों और पथ फ़ज़िंग का उपयोग करता है। विशेषताएँ विभिन्न हेडर मैनिपुलेशन का परीक्षण X-Forwarded-For, X-Original-URL, X-Rewrite-URL,...

CVE-2025-45422---Bbox

CVE-2025-45422: Proximus b-box UPnP स्थिरता और अभिगम नियंत्रण बाईपास https://vulners.com/cve/CVE-2025-45422 यह स्क्रिप्ट CVE-2025-45422 को प्रदर्शित करती है जो Proximus b-box राउटर्स को प्रभावित करता है जो फर्मवेयर संस्करण 8c.725A चला रहे हैं। यह राउटर के UPnP कार्यक्षमता का उपयोग करके आंतरिक...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-9254

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image root@kitploit: $ git clone [email protected]:mf-labs/witcher.gi...