MAL-2026-14881 Malicious code in 3layerdipstackpvsk6r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e34830364afafa686e2e3f603e1dcebc4e837e0cbc4080216d6587d1b8f64850 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2025-57428

⚠️ Questo repository è mantenuto solo come riferimento per CVE-2025-57428. Per altri advisory e aggiornamenti, consultare: security-advisories. CVE-2025-57428 - Interfaccia di debug Telnet abilitata per impostazione predefinita consente l'accesso di basso livello a flash/registri Prodotto...

FortiOS-Credentials-Disclosure

FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Uso : python CVE-2018-13379.py list.txt...

CVE-2021-38295-PoC

CVE-2021-38295-PoC Ein einfacher Python-Proof-of-Concept für CVE-2021-38295. Zugehöriger Blogbeitrag LINK ZUM BLOG Verwendung: root@kitploit: Usage: cve-xxxx Gib dem Skript einfach einen Host, eine Datenbank, auf die deine Anmeldedaten Zugriff haben, sowie das Benutzername-Passwort-Paar. Wenn all...

Turvan6rkus-CVE-2024-3273

🛠️ Dispositivi D-Link Network Attached Storage - Iniezione di Comandi 🌟 Contesto I dispositivi D-Link Network Attached Storage NAS o storage di rete sono dispositivi con uno o più hard disk collegati a una rete informatica per l'archiviazione e la condivisione di file. A differenza di un normale...

EUVD-2026-67719

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

CVE-2026-19412

CVE-2026-19412 affects the CP Plus CP-XR-DE21-S Router due to hardcoded HTTP Digest authentication credentials embedded in the firmware, which are identical across all devices running the affected firmware. An attacker with adjacent network access (no privileges required) can obtain these credent...

CVE-2026-19412 Hardcoded Credentials Vulnerability in CP Plus CP-XR-DE21-S Router

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability b...

CVE-2026-82243

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

POC-CVE-2026-19295

Descrizione Codice proof of concept per l'exploit di CVE-2026-19295 Utilizzo python3 poc.py -url -uname -pword...

CVE-2024-21413

CVE-2024-21413 Anmeldeinformationen durch Ausnutzen der Schwachstelle CVE-2024-21413 abrufen Zunächst einmal Hallo. Dank einer Schwachstelle in Microsoft Outlook können Sie die folgenden Schritte ausführen, um Windows-Benutzerinformationen zu erhalten. Ich sende die E-Mail über die PHP-Bibliothek...

CVE-2025-65855

CVE-2025-65855 HelpFlash IoT OTA-Update – Mehrere Schwachstellen Zusammenfassung Mehrere Schwachstellen im OTA-Firmware-Update-Mechanismus von Netun Solutions HelpFlash IoT ermöglichen einem Angreifer mit kurzem physischem Zugriff die Ausführung von beliebigem Code. CVE-ID: CVE-2025-65855...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Cerchiamo i dispositivi vulnerabili su Google con la parola chiave: intitle:"DVR login". 2. Proviamo ad accedere a un dispositivo qualsiasi: Vediamo che il dispositivo richiede l'inserimento di Username...

CVE-2023-30146

CVE-2023-30146 - Exploit per Webcam Assmann/HooToo - Esposizione di Dati Sensibili Descrizione È stato scoperto un problema nelle IP camera dei marchi HooToo e Assmann. Il firmware memorizza le credenziali di amministratore e utente nel backup in chiaro. Il backup può essere recuperato e...

CVE-2026-82253

gitoxide (Rust crates gix ≤ 0.72.0 and gix-validate ≤ 0.10.0 ) is affected by a path traversal vulnerability. The submodule name validation in gix-validate only checks the first occurrence of .. via name.find(b".."), allowing crafted names like a..b/../../../.git/ to bypass the check. Additionall...

EUVD-2026-67695

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds Tentativo di rubare le credenziali del kernel da launchd + puntatore taskt Basato su: CVE-2017-7047 Informazioni su Triple Fetch di Ian Beer di Google Project Zero Triple Fetch è un exploit per dispositivi iOS precedenti a iOS 10.3.3. Sfrutta un errore logico in libxpc c...

CVE-2026-73209

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...