CVE-2026-16006

CVE-2026-16006 is an exposure of sensitive system information vulnerability in the ASUS Armoury Crate driver . A local user with low privileges can send a crafted IOCTL request that bypasses the driver's verification mechanism, allowing them to obtain kernel virtual addresses and gain insight int...

CVE-2025-70829

CVE-2025-70829: Information Exposure in Datart 中文文档 1. Vulnerability Overview CVE ID : CVE-2025-70829 Product : Datart Version : v1.0.0-rc.3 Vulnerability Type : Information Exposure An information exposure vulnerability in Datart v1.0.0-rc.3 allows authenticated attackers to access sensitive dat...

CVE-2026-13768

CVE-2026-13768 - Exposición de la clave de propietario del IoT Hub de Gardyn !WARNING Este repositorio contiene una prueba de concepto totalmente funcional para una vulnerabilidad de IoT de alta severidad. Este código se proporciona estrictamente con fines educativos, investigación de seguridad...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 基于 Aaron Herndon @ac3lives Rapid7 的原始漏洞利用程序 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ 感谢 Aaron Herndon / https://twitter.com/ac3lives / https://github.com/ac3lives/kyocera-cve-2022-1026 感谢 claude 为我创建了改进的 P...

Cve-2026-27944-Tools-Exploit

🚀 CVE-2026-27944: Exploit de Backup sin Autenticación en Nginx UI 📌 Descripción 27944.py es una herramienta de explotación para CVE-2026-27944 que permite a un atacante descargar y descifrar copias de seguridad de Nginx UI sin autenticación. Esta vulnerabilidad está presente en Nginx UI versión...

CVE-2026-76963

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

EUVD-2026-72561

knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installations. Attackers can access the unauthenticated /api/tunnel/start endpoint to provision a public tunnel and republish the API at a publicl...

CVE-2026-76963 Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-87732

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-79569

MovieRecommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

NewStart CGSL MAIN 7.02 : librabbitmq Vulnerability (NS-SA-2026-0102)

The remote NewStart CGSL host, running version MAIN 7.02, has librabbitmq packages installed that are affected by a vulnerability: - An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for...

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

CVE-2026-79570

mfish-nocode-pro v1.0.0 is affected by a SQL injection vulnerability in the tableName parameter at the /sys/dbConnect/data endpoint. An unauthenticated, remote attacker can craft a malicious SQL statement to access sensitive database information, with high impact to confidentiality, integrity, an...

PT-2026-88502

Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...

Release Information for Veeam Plug-In for Microsoft Azure 9.1

Release Information 13.9.1.407 2026-09-08 Resolved issues General Storage account credentials are stored in plain text on worker appliances. Configuration Backup Configuration backup for the managed backup appliance fails after upgrading Veeam Backup & Replication to version 13.1. Under certain...

Linux Distros Unpatched Vulnerability : CVE-2026-69806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-69806 Note that Nessus...

nginx

CVE-2017-7529 唐胜表@portfolio10 摘要 本实验重现了Nginx服务器在处理Range请求过程中发生的缓存漏洞CVE-2017-7529，并展示漏洞的实际行为 漏洞：由于Nginx对Range头处理错误，可能导致缓存数据暴露 影响：服务器缓存文件中的敏感数据泄露 环境配置与运行 操作系统：Windows 10 Docker, Python 1. 在特定目录下创建文件夹 2. 创建Dockerfile、poc.py、docker-compose.yml文件 3. 运行'docker compose up -d' 4...

MSMQ-Vulnerability

MSMQ 安全实验室 该仓库记录了关于 Microsoft 消息队列安全暴露的受控实验室审查，重点关注防御性验证、检测证据和修复规划。 该项目定位为作品集工件：展示如何将漏洞研究转化为证据收集、检测工程、缓解规划和验证。 项目目的 本项目的目的是记录一个作品集安全实验室，将漏洞研究与实际防御工作联系起来。 范围 本仓库关注： 实验室环境说明 MSMQ 服务暴露审查 网络抓包证据 Windows 事件查看器观察结果 Snort 和 Suricata 检测示例 缓解与补丁验证清单 截图和日志的证据索引 仓库结构 root@kitploit: MSMQ-Vulnerability/ ├──...

vulnbox-easy-CVE-2025-29927

中间人攻击 此应用名为中间人攻击，因为它在 Next.JS 中间件中包含一个漏洞，而 flag 位于 API 调用中。 🚀 生产环境设置 1. .env.production root@kitploit: DATABASEURL=postgresql://postgres:password@db:5432/nextauth JWTSECRET=your-production-secret 2. 构建并启动 root@kitploit: docker compose up --build -d 🛠️ 开发环境设置 1. 克隆仓库 root@kitploit: git clone cd...