CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Accès via le fichier wfufiledownloader.php, WordPress File Upload Solution poc, vulnérabilité de la solution, permettant d'accéder arbitrairement aux fichiers, de les manipuler ou de les modifier...

CVE-2022-0847

CVE-2022-0847 概念验证 使用方法 root@kitploit: dirty-pipe CVE-2022-0847 USAGE: dirty-pipe --target --offset --data OPTIONS: -t, --target TargetFile -o, --offset Offset -d, --data Data -h, --help Print help information...

CVE-2021-1675_CarbonBlack_HuntingQuery

CarbonBlack Hunting Query para CVE-2021-1675 PrintNightmare 1 Baseado na regra Sigma para detecção do código POC root@kitploit: filemodname:c:\windows\system32\spool\drivers\x64\3\old\1\123 2 Baseado na regra Sigma para detecção do código POC root@kitploit:...

CVE-2024-31969

📌 CVE-2024-31969 CVE-2024-31969 è una vulnerabilità di escalation dei privilegi locale in sudo quando si utilizza il comando sudoedit. Questa vulnerabilità è stata introdotta a partire da sudo 1.9.0 a causa del modo in cui sudoedit validava le variabili d'ambiente dell'utente e la proprietà dei...

CVE-2022-30525_check

CVE-2022-30525check Descrizione: Questo script verifica la presenza della vulnerabilità di iniezione dei comandi del sistema operativo CVE-2022-30525 nei dispositivi Zyxel USG FLEX che eseguono versioni del firmware dalla 5.00 alla 5.21 Patch 1. La vulnerabilità consente a un attaccante di...

CVE-2016-5195

Descrizione: dcow è un possibile exploit della vulnerabilità CVE-2016-5195. Eseguendo il programma come utente non privilegiato su un sistema vulnerabile, modificherà il file /etc/passwd, imponendo la password "dirtyCowFun" SHA-512, ma potrebbe essere modificata per standard più vecchi. In caso d...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List = 6.3.7 - Autorizzazione Mancante per Modifica File Non Autenticata Sintesi Esecutiva...

CVE-2025-43537

CVE-2025-43537 Credito di Sicurezza Apple Ricercatore: Al Sadman Awal Accreditato ufficialmente da Apple Product Security per la divulgazione responsabile di CVE-2025-43537. Panoramica CVE-2025-43537 è una vulnerabilità di sicurezza identificata durante una ricerca di sicurezza indipendente e...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V para PC permite que atacantes obtenham execução remota parcial de código ou modifiquem arquivos em um PC, conforme explorado ativamente em janeiro de 2023. autenticação| complexidade| vetor ---|---|--- não disponível| não disponível| não disponível...

DirtyPipe

Exploit Dirty Pipe: CVE-2022-0847 A vulnerabilidade Dirty Pipe, também conhecida como CVE-2022-0847, é uma falha significativa no kernel do Linux. Este repositório fornece uma versão adaptada do código de exploit amplamente utilizado, para torná-lo mais amigável e modular. Uma explicação muito bo...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

CVE-2026-78387 RansomLook Missing Authorization in Web Configuration Editor Allows Application Configuration Modification

RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint. The endpoint requires an authenticated session but does not perform an explicit privilege or administrator authorization check before allowing access to...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

SparstanBoogie

SparstanBoogie’s Ursprünge wurden Berichten zufolge auf iOS/iPadOS 15.2 – 16.7 RC 20H18 und 17.0 getestet, allerdings wurden Tests bis zu 26.1 26.1 sind. Auch Tests auf Geräten oberhalb oder unterhalb der gemeldeten Versionen sind willkommen, da es auf neueren Geräten möglicherweise wieder...

PT-2026-78766

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Insufficient input validation in the geostats command allow...

SUSE SLES15 Security Update : kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6 (SUSE-SU-2026:3630-1)

"The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3630-1 advisory. - CVE-2025-47911: golang.org/x/net/html: algorithms that have quadratic complexity when parsing HTML documents allow for denial of...

PT-2026-78769

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with the "power" role can store risky Search...