100967 matches found
CVE-2026-82328
A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the usedclrs palette count parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue c...
CVE-2026-82324
A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...
CVE-2025-4162030
Avviso di Sicurezza: CVE-2025-4162030 Questo riepilogo di sicurezza è stato fornito da CoPilot ^1^. Il contenuto fornito su questo sito web è disponibile solo a scopo informativo e può essere consultato e utilizzato da motori di ricerca o modelli linguistici LLM con le seguenti restrizioni: Il...
CVE-2025-6018-6019-PoC
CVE-2025-6018 & CVE-2025-6019: PoC für lokale Privilege Escalation Ein robustes Proof of Concept PoC zur Verkettung von CVE-2025-6018 PAM/Polkit Active-Session-Bypass und CVE-2025-6019 libblockdev-SUID-Mount-Fehler, um auf verwundbaren Linux-Systemen Root-Zugriff zu erlangen. Haftungsausschluss...
CVE-2022-31814
CVE-2022-31814...
CVE-2008-6970
DESCRIZIONE Sfrutta una falla nella convalida dei parametri di input PHP e forza bruta alla cieca l'hash MD5 SQL memorizzato per un dato ID utente. FILE root@kitploit: CVE-2008-6970.sh - Programma di shell code. FONTE https://github.com/KyomaHooin/CVE-2008-6970...
CVE-2026-73208
Dovecot (Open-Xchange) contains an OAuth2 token validation flaw : when a token response lacks a scope claim , the audience claim is used in its place and checked against configured required scopes. Because these are distinct concepts, a token granted no relevant permissions can be accepted if its...
CVE-2026-40205
An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly...
CVE-2026-31431-CopyFail-Linux-PrivEsc
CVE-2026-31431 CopyFail Linux Local Privilege Escalation Una dimostrazione e spiegazione di CVE-2026-31431, la vulnerabilità di escalation dei privilegi locali nel kernel Linux denominata Copy Fail. La vulnerabilità consente la sovrascrittura dei dati nella cache delle pagine per file aperti con...
Apache-Pluto-3.0.0--CVE-2018-1306
CVE-2018-1306 Apache Pluto 3.0.0 Problem in der Autorisierungslogik, das es einem Angreifer ermöglicht, bösartige Dateien durch Manipulation von HTTP-Methoden hochzuladen. Skript geschrieben in python3. Verwendung: python3 ./plutorce.py http://192.168.0.1/ webshell.jsp...
CVE-2025-2502
Zufällig beim Lernen über lokale Privilegienausweitung entdeckt. In allen Versionen von Lenovo Computer Manager haben die Tools des Lenovo Computer Managers Berechtigungsmängel. Solange das Tool heruntergeladen ist, haben normale Benutzer die Berechtigung F vollständige Kontrolle. Da alle Version...
CVE-2025-55182
Scanner CVE-2025-55182 Una scanner prova di concetto per CVE-2025-55182 , una vulnerabilità critica di Esecuzione di Codice Remoto RCE non autenticata nei React Server Components RSC. Panoramica Il 3 dicembre 2025 è stata divulgata una vulnerabilità critica che interessa React 19.x e le...
EUVD-2026-67574
The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...
CVE-2026-3129
The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...
Zimbra10_SQL_Injection
Questo repository non contiene un README...
React2Shell_CVE-2025-55182
CVE-2025-55182 Modularer Exploit mit WAF-Bypass Ein Python-Skript, das eine interaktive Shell zur Ausnutzung der kritischen RCE-Sicherheitslücke CVE-2025-55182 in verwundbaren React Server Components- und Next.js-Anwendungen bereitstellt. Dieser Exploit zielt auf den Deserialisierungsfehler, der...
CVE-2020-14882
CVE-2020-14882...
pwnage24mtk
pwnage24mtk Cert-Exploit für MTK-Geräte. Es gibt einen logischen Fehler im MTK-Zertifikatsprüfungsprozess. Ähnlich wie CVE-2023-20696. Möglicherweise im Juni gepatcht. Haftungsausschluss Dieses Projekt dient nur zu Forschungszwecken. Stelle sicher, dass du autorisiert bist, bevor du es verwendest...
tech-seminar-React2Shell
React2Shell CVE-2025-55182 Seminário técnico WooriFISA 6ª edição - Equipe 3: Análise e pesquisa da vulnerabilidade de execução remota de código RCE explorando a falha de design do React Server Component RSC, React2Shell Equipe...