CVE-2026-39975

Combodo iTop , a web-based IT service management tool, is vulnerable to remote code execution prior to version 3.2.3 . The root cause involves the ability of unauthenticated users to delete the .readonly file , which is created during setup to prevent write actions on the instance. Per the CVELIS...

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Autor: Letda Kes dr. Sobri, S.Kom. Uma ferramenta de teste de penetração para contornar respostas HTTP 401/403 usando várias técnicas de manipulação de cabeçalhos e fuzzing de caminhos. Funcionalidades Testa várias manipulações de cabeçalhos X-Forwarded-For,...

CVE-2025-45422---Bbox

CVE-2025-45422: Proximus b-box UPnP स्थिरता और अभिगम नियंत्रण बाईपास https://vulners.com/cve/CVE-2025-45422 यह स्क्रिप्ट CVE-2025-45422 को प्रदर्शित करती है जो Proximus b-box राउटर्स को प्रभावित करता है जो फर्मवेयर संस्करण 8c.725A चला रहे हैं। यह राउटर के UPnP कार्यक्षमता का उपयोग करके आंतरिक...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-9254

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image root@kitploit: $ git clone [email protected]:mf-labs/witcher.gi...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Pesquisa de Buffer Overflow Objetivo Estudo de uma vulnerabilidade clássica de buffer overflow baseado em pilha em um ambiente de laboratório controlado para fins educacionais. O objetivo deste projeto foi entender melhor: Fuzzing de aplicativos...

EUVD-2026-65060

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-76073

Label Studio (through 1.23.0 ) has a broken access control flaw in its annotation detail endpoint. The AnnotationAPI in label_studio/tasks/api.py declares queryset = Annotation.objects.all() without a get_queryset override, so any annotation is retrievable by primary key. Because permissions are ...

CVE-2026-78122-POC

CVE-2026-78122 — प्रूफ ऑफ कॉन्सेप्ट Tecnativadocker-socket-proxy ≤ 0.5.0 — अपर्याप्त एक्सेस-नियंत्रण ग्रैन्युलैरिटी CWE-1220 CVSS 4.0: 8.3 उच्च — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N हमला वेक्टर एडजेसेंट आसन्न है AV:A: हमलावर को प्रॉक्सी तक लोकल/आसन्न नेटवर्क पहुँच की...

CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl

CVE-2026-56423 — MISP deleteSelection Controle de Acesso Quebrado Prova de conceito para uma falha de autorização ausente nos fluxos de exclusão em massa do MISP para Relatórios de Evento e Grupos de Compartilhamento. Os manipuladores deleteSelection autorizam cada item selecionado com um callbac...

adminer_CVE-2021-43008

CVE-2021-43008 — Vulnerabilidade do Adminer Leitura arbitrária de arquivos via um servidor MySQL malicioso 1. O que é o Adminer? Adminer é uma ferramenta web PHP que permite administrar facilmente bancos de dados MySQL, PostgreSQL, SQLite ou SQL Server. É comumente implantado como uma alternativa...

enforcement-coverage

تغطية الإنفاذ تكتشف مسارات API التي تحمل تحكمًا في التفويض أضعف من مساراتها الشقيقة. عثرت على CVE-2026-45316 في Open WebUI من الكود المصدري وحده، دون أي معرفة مسبقة بنشرة أمنية: root@kitploit: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require...

CVE-2026-66916

Bypass de Categoria Protegida por Senha via Formato JSON no JoomGallery JoomGallery ≤ 4.3.0-stable — Atacante Não Autenticado Contorna o Portão de Senha para Baixar Imagens Protegidas RESUMO Existe um bypass de controle de acesso não autenticado na visualização JSON de categorias do JoomGallery...

CVE-2026-9254 Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

CVE-2026-9254

An unauthenticated OS command injection vulnerability exists in the parental control functionality of TP-Link Archer BE800 V1, BE3600 V1, and AX75 V1 routers, caused by improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker with no prior access can...

EUVD-2026-65006

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...

throttlestop-exploit-rw

Mapeador de Memória Física Ferramenta de pesquisa que demonstra acesso à memória física através da tradução de endereço virtual para físico combinada com exploração de driver vulnerável. Visão Geral Este projeto explora o gerenciamento de memória de baixo nível do Windows combinando a técnica...