EUVD-2026-88742

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata,...

CVE-2026-66083 Apache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource

The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpoint to obtain information about data sources they are not authorized to access. This may expose data source configuration and other sensitive metadata,...

CVE-2025-45809-PoC

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4 versions before v1.81.0 /key/block and /key/unblock endpoints have a SQL injection vulnerability in the key parameter. Attackers can use time-based blind injection techniques to steal database content and...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

exim-cve-2019-10149-data

Exim CVE Data Collection Data Collection Related to Exim Vulnerabilities CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 CVE Announcement: https://vulners.com/cve/CVE-2019-10149 Exploit Details: https://www.exploit-db.com/exploits/46974 Issue Timeline: https://seclists.org/fulldisclosure/2019/Jun/...

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...

CVE-2025-8088

CVE-2025-8088 PoC Educational Use Only Details about this CVE can be found at: https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ Warning: This repository contains a proof-of-concept PoC for CVE-2025-8088. It is intended for educational purposes, research, and lab environments only. Do not use this...

CVE-2026-76719

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Extractor de Datos Compilación git clone https://github.com/JohnDoeAnonITA/CVE-2023-23752 cd CVE-2023-23752 go build . Uso CVE-2023-23752.exe -h|--help -u|--url "" -t|--type 1|2 Ayuda / / / | // //// // //.'///'/ // //// / CVE-2023-23752 Data Extractor v0.1 Argumento...

CVE-2025-4138_tarfile_filter_bypass

CVE-2025-4138 — Python tarfile filter="data" Bypass Arbitrary file write outside the extraction directory via PATHMAX symlink chain. Affected Versions Python 3.12.0 – 3.12.10 Python 3.13.0 – 3.13.3 Fixed in 3.12.11 / 3.13.4 Credit: Reporter: Caleb Brown Google How It Works Python's tarfile data...

EUVD-2026-88698

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-76719 HPE OneView - Cross-site scripting vulnerability

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-76719

A security vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that may be exploited remotely. The vulnerability allows for Cross-Site Scripting (XSS) and URL Redirection , which can lead to session hijacking , data theft , or other unauthorized actions. The CVSS v3.1 ...

CVE-2026-24418

CVE-2026-24418 OpenSTAManager = 2.9.8 — Error-Based SQL Injection in Scadenzario Bulk Operations Module Overview Field| Details ---|--- CVE ID| CVE-2026-24418 Severity| HIGH 8.8 CWE| CWE-89: SQL Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Parameter| idrecords POST array...

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, but then drops $entry-metakey straight into the SQL string without escaping: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Because metakey comes from the database, the code treats it as trusted. But...

Spring4Shell-PoC-exploit

Spring4Shell - PoC CVE - 2022 - 22965 Versions affected : Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19 and older versions Java JDK 9 Apache Tomcat versions below 10..0.20, 9.0.62, and 8.5.78 Applications that are packaged as a traditional WAR with spring-webmvc or spring-webflux...

external_libexif_AOSP10_r33_CVE-2020-0198

libexif ------- DESCRIPTION libexif is a library for parsing, editing, and saving EXIF data. It is intended to replace lots of redundant implementations in command-line utilities and programs with GUIs. FEATURES libexif supports parsing, editing and saving of EXIF data. In addition, it has gettex...

apache__dolphinscheduler_CVE-2023-51770_3_2_1_fixed

Apache Dolphinscheduler Acerca de Apache DolphinScheduler es la plataforma moderna de orquestación de datos. Ágil para crear flujos de trabajo de alto rendimiento con poco código. También proporciona una interfaz de usuario potente, dedicada a resolver dependencias complejas de tareas en el...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters," the Politie Landelijke Opsporing en...