ROS-20261012-73-0127

The vulnerability in the kernel-lt is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability can allow an attacker to cause a service failure...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

flare-floss

Scripts de FLOSS FLOSS soporta la conversión de su salida en scripts para varias herramientas. Consulte los scripts de renderizado en este directorio. Adicionalmente, hay otro plugin para IDA para permitir que FLOSS extraiga automáticamente cadenas ofuscadas y las aplique al módulo actualmente...

Uncontrolled Search Path Element

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Uncontrolled Search Path Element

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Uncontrolled Search Path Element

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Uncontrolled Search Path Element

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

CVE-2026-104682

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

ntlmv1-multi

NTLMv1 Multi Tool Questo strumento converte gli hash NTLMv1 in NTLM, o più precisamente formatta le risposte alla challenge NTLMv1 in un formato che può essere crackato con hashcat modalità 14000. Calcolo di CT3 Se specifichi --ct3, lo strumento calcola le ultime 4 cifre dell'NTLM per te; se...

CVE-2026-104682 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

bopscrk

bopscrk Genera wordlist intelligenti e potenti per attacchi mirati Esplora la documentazione » Guarda la demo · Segnala un bug · Richiedi una funzionalità Indice dei contenuti 1. Informazioni sul progetto Novità Realizzato con 2. Per iniziare Installazione Esegui la modalità interattiva 3. Utiliz...

CVE-2026-104682: Missing Authorization

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

oregami

Oregami """ A cosa serve questo registro? Hmm.. Lo rinominerò semplicemente in veryuniquename, farò una ricerca testuale e troverò tutti i riferimenti! Ok.. Aspettando che la ricerca finisca.. da un momento all'altro.. Fatto! Ora devo solo capire quale dei risultati della ricerca sia rilevante pe...

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

EUVD-2026-95906

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

CVE-2026-108158

The plugNmeet Server through 2.5.2 version is vulnerable to a path traversal vulnerability in the /api/whiteboard/convert endpoint. An authenticated meeting participant can provide crafted filePath values containing ../ sequences to force the server to convert arbitrary files into page images. Th...

CVE-2026-108158 plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then...

CVE-2026-104079

Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on...

CVE-2026-104079

The Envira Gallery Lite plugin (versions prior to 1.16.2 ) is vulnerable to a missing authorization flaw in its gallery conversion REST endpoint. This flaw allows lower-privileged authenticated users to create and publish galleries without proper capabilities because the endpoint only verifies ed...

EUVD-2026-95769

Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create and publish Envira galleries without the required capabilities, because the endpoint only checks edit permissions on...