24059 matches found
autoresponder
AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...
CVE-2026-13156
CVE-2026-13156 — MailerSend Official SMTP Integration !IMPORTANT Resumen: Se descubrió una vulnerabilidad de Falsificación de Solicitudes entre Sitios CSRF de severidad alta CVE-2026-13156 en el plugin oficial MailerSend SMTP Integration para WordPress 1.0.8. El manejador de eliminación de...
CVE-2025-60710
CVE-2025-60710 Este es un PoC para la vulnerabilidad de escalada de privilegios local en la tarea programada \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. Cuando se inicia esta tarea programada, el proceso taskhostw.exe intentará abrir el directorio...
CVE-2026-76081
ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...
WifiPassword-Stealer
WifiPassword-Stealer Obtén todas las contraseñas WiFi registradas de la computadora objetivo. INSTALACIÓN si estás usando un archivo python root@kitploit: pip install smtplib pip install subprocess pip install glob USO •Crea una cuenta en "https://mailtrap.io/" usando un correo temporal. •Estable...
CVE-2026-76081
ZITADEL , an open source identity management platform, contains a permission revocation flaw affecting versions prior to 4.16.0 . When multiple project roles are deleted simultaneously, a bug in the permission-update logic can cause some User Grants on Granted Projects (projects shared between or...
CVE-2026-76081 ZITADEL: Improper Role Revocation on Granted Projects during Multiple Role Deletions
ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...
fortinet-cve-2024-46671
CVE-2024-46671 Vulnerabilidad 0-day descubierta en FortiWeb waf versión 7.4.3 build 638GA Exploit Principalmente, este script automatiza la explotación de una vulnerabilidad IDOR autenticada que conduce a la eliminación de cuentas y a la recreación de la cuenta predeterminada sin contraseña debid...
CVE-2026-86905
Apple's Keychain component was vulnerable to a flaw that allowed an app to delete credentials stored within it. The root cause was identified as vulnerable code, which was addressed by its removal. The fix ships in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 . No publicly available e...
EUVD-2026-78103
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...
CVE-2025-48799
Descripción Esto es un PoC para CVE-2025-48799, una vulnerabilidad de elevación de privilegios en el servicio de Windows Update. Esta vulnerabilidad afecta a clientes Windows win11/win10 con al menos 2 discos duros. Cuando la máquina tiene múltiples discos duros, es posible cambiar la ubicación...
EUVD-2026-78088
Concrete CMS 9 through 9.5.2 did not validate a CSRF token in the orphaned block removal panel action removeOrphanedBlocks. A remote attacker could craft a request that, when loaded by an authenticated user holding edit permission on the target page, deleted every block on that page's current...
CVE-2026-47253
Anyquery (an SQL query engine built on SQLite) is vulnerable to path traversal in the clear_plugin_cache(plugin) SQL scalar function (namespace/other_functions.go). Prior to 0.4.5 , the caller-controlled plugin argument is passed through path.Join to os.RemoveAll without rejecting .. segments, al...
CVE-2026-47253 Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, the clearplugincacheplugin SQL scalar function in namespace/otherfunctions.go passes the caller-controlled plugin parameter through path.Join to os.RemoveAll without rejecting traversal segments. A low-privileged bearer-token...
CVE-2023-21752
CVE-2023-21752 PoC para la vulnerabilidad de eliminación arbitraria de archivos en el servicio de Backup de Windows. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 Este repositorio contiene dos exploits: v1 - Simplemente realiza la eliminación del archivo elegido por el...
EUVD-2026-77798
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability...
rsync: rsync: Arbitrary file deletion via malicious file list
An improper path handling vulnerability in rsync allows a remote attacker to delete arbitrary files on the receiving system. By sending a specially crafted file list during synchronization, an attacker can expand the scope of --delete operations beyond the target directory, potentially causing a...
CVE-2023-40362
CVE-2023-40362 CVE-2023-40362 detalles de la vulnerabilidad y prueba de concepto. Resumen Una vulnerabilidad de control de acceso en Click2Gov BP en la URI /Click2GovBP/mastercontractorlist.html permite a los usuarios autenticados eliminar contratistas de las cuentas de otros usuarios usando el I...
CVE-2024-7856
CVE-2024-7856 ★ CVE-2024-7856 Prueba de concepto de eliminación arbitraria de archivos ★ Descripción CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar = 5.7.0.1 – Falta de autorización para usuarios autenticados Suscriptor+ para eliminación arbitraria de archivos...