CVE-2025-6018-6019-PoC

CVE-2025-6018 & CVE-2025-6019: PoC für lokale Privilege Escalation Ein robustes Proof of Concept PoC zur Verkettung von CVE-2025-6018 PAM/Polkit Active-Session-Bypass und CVE-2025-6019 libblockdev-SUID-Mount-Fehler, um auf verwundbaren Linux-Systemen Root-Zugriff zu erlangen. Haftungsausschluss...

CVE-2022-31814

CVE-2022-31814...

CVE-2008-6970

DESCRIZIONE Sfrutta una falla nella convalida dei parametri di input PHP e forza bruta alla cieca l'hash MD5 SQL memorizzato per un dato ID utente. FILE root@kitploit: CVE-2008-6970.sh - Programma di shell code. FONTE https://github.com/KyomaHooin/CVE-2008-6970...

CVE-2026-73208

Dovecot (Open-Xchange) contains an OAuth2 token validation flaw : when a token response lacks a scope claim , the audience claim is used in its place and checked against configured required scopes. Because these are distinct concepts, a token granted no relevant permissions can be accepted if its...

CVE-2026-40205

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Linux Local Privilege Escalation Una dimostrazione e spiegazione di CVE-2026-31431, la vulnerabilità di escalation dei privilegi locali nel kernel Linux denominata Copy Fail. La vulnerabilità consente la sovrascrittura dei dati nella cache delle pagine per file aperti con...

Apache-Pluto-3.0.0--CVE-2018-1306

CVE-2018-1306 Apache Pluto 3.0.0 Problem in der Autorisierungslogik, das es einem Angreifer ermöglicht, bösartige Dateien durch Manipulation von HTTP-Methoden hochzuladen. Skript geschrieben in python3. Verwendung: python3 ./plutorce.py http://192.168.0.1/ webshell.jsp...

CVE-2025-2502

Zufällig beim Lernen über lokale Privilegienausweitung entdeckt. In allen Versionen von Lenovo Computer Manager haben die Tools des Lenovo Computer Managers Berechtigungsmängel. Solange das Tool heruntergeladen ist, haben normale Benutzer die Berechtigung F vollständige Kontrolle. Da alle Version...

CVE-2025-55182

Scanner CVE-2025-55182 Una scanner prova di concetto per CVE-2025-55182 , una vulnerabilità critica di Esecuzione di Codice Remoto RCE non autenticata nei React Server Components RSC. Panoramica Il 3 dicembre 2025 è stata divulgata una vulnerabilità critica che interessa React 19.x e le...

EUVD-2026-67574

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

CVE-2026-3129

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...

Zimbra10_SQL_Injection

Questo repository non contiene un README...

React2Shell_CVE-2025-55182

CVE-2025-55182 Modularer Exploit mit WAF-Bypass Ein Python-Skript, das eine interaktive Shell zur Ausnutzung der kritischen RCE-Sicherheitslücke CVE-2025-55182 in verwundbaren React Server Components- und Next.js-Anwendungen bereitstellt. Dieser Exploit zielt auf den Deserialisierungsfehler, der...

CVE-2020-14882

CVE-2020-14882...

pwnage24mtk

pwnage24mtk Cert-Exploit für MTK-Geräte. Es gibt einen logischen Fehler im MTK-Zertifikatsprüfungsprozess. Ähnlich wie CVE-2023-20696. Möglicherweise im Juni gepatcht. Haftungsausschluss Dieses Projekt dient nur zu Forschungszwecken. Stelle sicher, dass du autorisiert bist, bevor du es verwendest...

tech-seminar-React2Shell

React2Shell CVE-2025-55182 Seminário técnico WooriFISA 6ª edição - Equipe 3: Análise e pesquisa da vulnerabilidade de execução remota de código RCE explorando a falha de design do React Server Component RSC, React2Shell Equipe...

CVE-2016-3088

CVE-2016-3088...

CVE-2026-3129 LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted tag attributes in all versions up to, and including, 7.7. This is due to a flawed regular expression that is used to strip width and height attributes from images when the "Lazy Load Images" and "Add...

CVE-2019-19550

CVE-2019-19550 Descrizione Bypass dell'autenticazione remota in Senior Rubiweb 6.2.34.28 e 6.2.34.37 consente l'accesso admin a informazioni sensibili degli utenti interessati utilizzando versioni vulnerabili. L'attaccante ha solo bisogno di fornire l'URL corretto. Date Importanti Annuncio al...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to an access control vulnerability in AFT web app ( CVE-2026-1264 )

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed access control security vulnerability Vulnerability Details CVEID:CVE-2026-1264 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 throu...