CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS - Escalade de privilèges locale Versions affectées Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilisation gcc exploit.c -o exploit ./exploit Description Problème spécifique à Ubuntu dans le système de fichiers...

CVE-2019-15107_webminRCE

CVE-2019-15107webminRCE exploit RcE non autorisé pour webnin 1.920 version modifiée de https://github.com/jas502n/CVE-2019-15107 POC https://asciinema.org/a/YzMmXQyvZcsBF9OzccXxmHmyQ...

Security Bulletin: Security vulnerability in Java affects IBM Robotic Process Automation

Summary A security vulnerability in Java affects IBM Robotic Process Automation. Java is used by IBM Robotic Process Automation as part of its deployment. This bulletin identifies the fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily...

CVE-2014-6287

CVE-2014-6287 - Exploit RCE du serveur de fichiers HTTP Rejetto Une implémentation en Rust de l'exploit CVE-2014-6287 ciblant le serveur de fichiers HTTP Rejetto HFS versions 2.3x antérieures à 2.3c. Présentation de la vulnérabilité CVE-2014-6287 est une vulnérabilité critique d'exécution de code...

CVE-2025-3248

CVE-2025-3248 ★ CVE-2025-3248 Langflow RCE PoC ★ Configuration du laboratoire root@kitploit: docker pull langflowai/langflow:1.2.0 docker run -d --name CVE-2025-3248 -p 7860:7860 langflowai/langflow:1.2.0 localhost:7860 Description Les versions de Langflow antérieures à 1.3.0 sont vulnérables à u...

Security Bulletin: Security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. IBM WebSphere Application Server Liberty is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Ce dépôt montre un exploit pour CVE-2021-24762. Il s'agit d'une injection SQL aveugle qui, dans la configuration par défaut, récupère le mot de passe de l'administrateur. En réalisant un laboratoire basé sur Wordpress avec le plugin PerfectSurvey, je suis resté bloqué sur un...

Security Bulletin: Security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in Python affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. Python is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fixes...

CVE-2019-11932

CVE-2019-11932 L'adresse de system et le gadget doivent être remplacés par l'adresse réelle trouvée via une vulnérabilité de divulgation d'informations. Après avoir remplacé l'adresse de system et du gadget, exécutez le code pour générer le fichier GIF corrompu : root@kitploit:...

CVE-2025-9286

CVE-2025-9286 Appy Pie Connect for WooCommerce = 1.1.2 - Отсутствие авторизации, ведущее к неаутентифицированному повышению привилегий ⚠️ Appy Pie Connect для WooCommerce = 1.1.2 - Отсутствие авторизации, ведущее к неаутентифицированному повышению привилегий через resetuserpassword 📝 Описание...

CVE-2025-8359

CVE-2025-8359 AdForest Dépôt : Nxploited/CVE-2025-8359 Script d'exploitation : CVE-2025-8359.py 📋 Description CVE : CVE-2025-8359 Type de vulnérabilité : Contournement de l'authentification Produit concerné : AdForest - Classified Ads WordPress Theme Versions concernées : Jusqu'à 6.0.9 inclus Sco...

EUVD-2026-69644

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73781 Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73781

HPE AOS-CX web-based management interface contains a stored cross-site scripting (XSS) vulnerability. An authenticated remote attacker can inject malicious script that executes in the browser of an administrative user who interacts with the affected interface, enabling arbitrary script execution ...

CVE-2026-73781 Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in AOS-CX Web-Based Management Interface

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...

CVE-2026-73778

CVE-2026-73778 affects the Credential Manager component of HPE devices. The vulnerability stems from a predictable factory-default password present in devices that are in their factory-default or post-ZTP (Zero Touch Provisioning) state before an administrator has configured credentials. An unaut...

CVE-2026-73778 Credential Manager Vulnerability Allows Unauthorized Administrative Access

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

CVE-2026-73778 Credential Manager Vulnerability Allows Unauthorized Administrative Access

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

EUVD-2026-69641

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providi...

CVE-2026-73775

AOS-CX (HPE) has an authenticated information disclosure vulnerability in its API endpoint . A remote attacker with low-privilege credentials can retrieve sensitive information that may enable further access to network services managed by AOS-CX. The CVSS 3.1 score is 7.7 (HIGH) with a changed sc...