CVE-2026-101144

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2026-101145

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101146

A security flaw has been discovered in Eleveo Quality Management 9.7.0. This issue affects the function UtilsService.createAndSaveAudit of the file /qm/cz.zoom.scorecard.webui.Scorecard/QMUtilsService of the component GWT RPC Handler. Performing a manipulation results in information disclosure. T...

CVE-2026-101187

A weakness has been identified in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function popusbdevice of the file usr/lib/lua/luci/controller/api/zrUsb.lua of the component USB Device Management API. This manipulation of the argument path causes command injection. The attack is...

naive-hashcat

Naive Hashcat Descifra hashes de contraseñas sin complicaciones. Naive hashcat es un script plug-and-play preconfigurado con parámetros/tipos de ataque "suficientemente buenos", ingenuos y probados empíricamente. Ejecuta ataques de hashcat usando ./naive-hashcat.sh sin necesidad de saber qué ocur...

blackbird

Blackbird Blackbird 是一款强大的 OSINT 工具，它将超过 600 个平台上的快速用户名和电子邮件搜索与免费的人工智能分析功能相结合。通过利用像 WhatsMyName 这样的社区驱动项目，它确保了低误报率和高质量的结果。功能包括智能过滤器、精美的 PDF/CSV 导出以及完全自动化的分析——所有这些都来自一个 CLI。 设置 克隆仓库 git clone https://github.com/p1ngul1n0/blackbird cd blackbird 安装依赖 pip install -r requirements.txt 用法 按用户名搜索 python...

CVE-2026-20841-PoC

🛡️ CVE-2026-20841-PoC - Simple Proof of Concept Tool 📝 What is CVE-2026-20841-PoC? This application is a simple Proof of Concept PoC tool designed to demonstrate the behavior of the security issue referenced by CVE-2026-20841. It helps users understand the impact of this specific vulnerability in ...

CVE-2026-48907

CVE-2026-48907 Educational PoC ⚠️ This repository is for educational and defensive security purposes only. Test only on systems you own or are explicitly authorized to assess. Do not use this project against third-party systems. This PoC demonstrates CVE-2026-48907, an unauthenticated RCE...

CVE-2026-38526-PoC

CVE-2026-38526 | Krayin CRM v2.2.x Authenticated RCE - Unrestricted PHP File Upload via TinyMCE Description CVE-2026-38526 is a critical authenticated remote code execution vulnerability affecting Webkul Krayin CRM v2.2.x. The vulnerability exists in the TinyMCE media upload endpoint...

cve-2022-41352-zimbra-rce

CVE-2022-41352 Zimbra RCE No Autenticado CVE-2022-41352 es una vulnerabilidad de escritura arbitraria de archivos en servidores de correo Zimbra debido al uso de una versión vulnerable de cpio. CVE-2022-41352 NIST.gov CVE-2022-41352 Análisis de Rapid7 Versiones de Zimbra afectadas: Zimbra 9.0.0.p...

onioff

██████╗ ███╗ ██╗██╗ ██████╗ ███████╗███████╗ ██╔═══██╗████╗ ██║██║██╔═══██╗██╔════╝██╔════╝ ██║ ██║██╔██╗ ██║██║██║ ██║█████╗ █████╗ ██║ ██║██║╚██╗██║██║██║ ██║██╔══╝ ██╔══╝ ╚██████╔╝██║ ╚████║██║╚██████╔╝██║ ██║ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ v2.0 一个简单的工具——纯Python编写——用于检查深网URL（或洋葱地址）。 兼容...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina Info : New Microsoft Office zero-day used in attacks to execute PowerShell Summary On the 29th of May 2022, the NaoSec team, an independent Cyber Security Research Team, discovered a malicious Office document shared on Virustotal. This...

cve-2016-1764

Código de Exploit PoC para CVE-2016-1764 Recuperación de datos de iMessage en texto plano sin romper la criptografía Autores Shubham Shah de Bishop Fox Joe DeMesy de Bishop Fox Matthew Bryant CVE-2016-1764 Proveedor: Apple Fecha de publicación: 8 de abril de 2016 Fecha del parche: 21 de marzo de...

CVE-2026-101188

A security vulnerability exists in Netcore POWER13 version 2.0.240730.162638 . The flaw resides in the routerd.passwd_set function within the /ubus file, which can be manipulated to facilitate weak password recovery . This vulnerability is exploitable remotely , and the exploit has been publicly ...

CVE-2026-101188 Netcore POWER13 ubus routerd.passwd_set password recovery

A security vulnerability has been detected in Netcore POWER13 2.0.240730.162638. This issue affects the function routerd.passwdset of the file /ubus. Such manipulation leads to weak password recovery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2026-29041

CVE-2026-29041 — Authenticated RCE via Unrestricted File Upload in Chamilo LMS 1.11.32 -yellow?style=for-the-badge Authenticated Remote Code Execution in Chamilo LMS 1.11.32 via improper file upload validation in the ckuploadimage AJAX endpoint. A low-privileged student can upload a PHP web shell...

CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC

CVE-2026-38751 – Carga Arbitraria de Archivos en OpenSTAManager PoC Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2026-38751, que afecta a OpenSTAManager ≤ 2.10. La vulnerabilidad permite a un atacante autenticado cargar un módulo malicioso a través de la funcionalidad d...

CVE-2026-20253

🚨 CVE-2026-20253 - Critical Splunk Enterprise Unauthenticated File Creation Vulnerability Unauthenticated arbitrary file creation and truncation vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. 📖 Executive Summary CVE-2026-20253 is a critical vulnerability in Splunk Enterprise...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros GhostLock is a high-severity Use-After-Free UAF vulnerability in the Linux Kernel rtmutex subsystem. The flaw originates from incorrect waiter cleanup during Priority Inheritance PI...

[SECURITY] [DSA 6527-1] rsync security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 28, 2026 https://www.debian.org/security/faq -...