625397 matches found
tomcat-cve-2017-12617
Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP-Upload-Bypass / Remote Code Execution für Python3 Ich habe lediglich einige Anpassungen am ursprünglichen Skript vorgenommen, um es mit Python 3 kompatibel zu machen! Sollten Probleme oder Schwierigkeiten...
CVE-2026-78615
A Reflected Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL...
CVE-2026-78614
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...
CVE-2026-78616
A Stored Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate...
CVE-2026-78195
A Cross-Site Scripting XSS vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenticated administrator user to execute arbitrary JavaScript in another user's browser...
CVE-2026-78613
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...
CVE-2026-78612
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests...
CVE-2026-78008
A buffer overflow vulnerability in the WatchGuard Fireware OS Management Web UI allows an authenticated administrator with network access to cause a denial of service DoS condition or potentially execute arbitrary code by sending specially crafted network traffic...
CVE-2026-38821
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...
DEBIAN-CVE-2026-38821
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...
CVE-2026-19318
A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...
CVE-2026-61800
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...
CVE-2026-19315
A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...
CVE-2026-19313
An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...
cve-2022-24112
Apache APISIX 2.12.1 Remote Code Execution und Docker Labor Klonen wir das Repository mit gitclone, dann navigieren wir zu apisix-docker/examples. In dieser docker-compose.yml Datei haben wir bereits image: apache/apisix:2.12.0-alpine geändert, da die Sicherheitslücke in dieser Version existiert...
cve-2021-42013-docker-lab
CVE-2021-42013 Introdução Foi descoberto que a correção para CVE-2021-41773 no Apache HTTP Server 2.4.50 era insuficiente. Um atacante poderia usar um ataque de path traversal para mapear URLs para arquivos fora dos diretórios configurados por diretivas do tipo Alias. Se arquivos fora desses...
cve-2021-41773
CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server sfruttato Apache HTTP Server CVE-2021-41773 sfruttato in natura CVE-2021-42013: Path Traversal ed esecuzione di codice remoto in Apache HTTP Server 2.4.49 e 2.4.50 fix incompleto di CVE-2021-41773 Shodan oneliner...
electroniz3r
electroniz3r Take over macOS Electron apps' TCC permissions with electroniz3r. The tool has been presented for the first time on DEFCON31 in Las Vegas during my ELECTRONizing macOS privacy - a new weapon in your red teaming armory talk. Overview root@kitploit: $ electroniz3r OVERVIEW: macOS Red...
cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration
CVE-2018-11235-Git-Submodule-CE + Docker Ngrok-Konfiguration CVE-2018-11235-Git PoC und Tunneling mit Docker Ngrok Dockerfile erstellen root@kitploit: $ docker build -t cve-2018-11235 . Benutzerdefiniertes Netzwerk für ngrok erstellen root@kitploit: $ docker network create myngroknet...