CVE-2017-9805-Exploit

Ce depot n’a pas de fichier README...

EUVD-2026-69820

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957 FIPS mode assertion failure via malicious CERT payload

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-14957

CVE-2026-14957 is a denial-of-service vulnerability in Libreswan (an IPsec/IKE implementation for Linux). In FIPS mode , the add_decoded_cert() function calls CERT_ExtractPublicKey() and asserts the result is non-NULL. When public key extraction fails (e.g., RSA exponent set to 0), the assertion ...

CVE-2026-14957

In FIPS mode, Libreswan's adddecodedcert function calls CERTExtractPublicKey and asserts that the result is not NULL. However, CERTExtractPublicKey returns NULL when public key extraction fails, for example if the RSA exponent is set to 0. A remote attacker can send a malformed X.509 certificate ...

CVE-2026-84437

A vulnerability was found in OpenCart 4.1.0.3/4.1.0.4. The impacted element is an unknown function of the file catalog/controller/account/address.php of the component Autocomplete Workflow. The manipulation of the argument address1 results in cross site scripting. It is possible to launch the...

CVE-2026-84438

A vulnerability was determined in OpenCart 4.1.0.3/4.1.0.4. This affects an unknown function of the file catalog/controller/account/edit.php of the component Autocomplete Workflow. This manipulation of the argument firstname causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-84431

A vulnerability was detected in AirAsia MOVE App up to 12.47.1 on Android. This issue affects the function com.airasia.core.utils.RealPathUtil.getRealPath of the component com.airasia.mobile. Performing a manipulation of the argument displayname results in path traversal. The attack requires a...

CVE-2022-26134-Confluence-RCE

Exploit pour CVE-2022-26134 : Exécution de code à distance sans authentification sur Confluence via une injection OGNL Encore un exploit dans l'univers OGNL Description Confluence est un wiki d'entreprise basé sur le web développé par la société australienne Atlassian. Le 2 juin 2022, Atlassian a...

CVE-2019-17662

CVE-2019-17662 Description ThinVNC 1.0b1 est vulnérable à une lecture arbitraire de fichiers, ce qui conduit à une compromission du serveur VNC. La vulnérabilité existe même lorsque l'authentification est activée lors du déploiement du serveur VNC. Le mot de passe d'authentification est stocké en...

CVE-2020-27955-LFS-main

Git-lfs эксплойт удалённого выполнения кода RCE CVE-2020-27955 .bat / powershell версия Уязвимы: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken и др. Обнаружено Dawid Golunski https://legalhackers.com https://exploitbox.io Протестировано на Windows на: git...

CVE-2026-84441

Piwigo versions up to 16.3.0 are affected by a path traversal vulnerability in the Image Derivative Handler component, specifically in the file i.php . The vulnerable functionality is described as unknown, but manipulation of it allows an unauthenticated remote attacker to traverse the filesystem...

EUVD-2026-69819

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-84441 Piwigo Image Derivative i.php path traversal

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-84441 Piwigo Image Derivative i.php path traversal

A security vulnerability has been detected in Piwigo up to 16.3.0. Affected by this issue is some unknown functionality of the file i.php of the component Image Derivative Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit has been...

CVE-2022-25943

CVE-2022-24934 Présentation de la vulnérabilité Lors de l'installation de WPS Office, le service wpscloudsvr est installé avec des privilèges administrateur. Ce service est configuré pour un démarrage manuel, mais la liste de contrôle d'accès ACL du dossier contenant le service est mal configurée...

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Exploit pour Progress MOVEit Transfer CVE-2024-5806. Voir notre article de blog sur TBD. PoC en action Consultez --help pour, eh bien, l'aide. Une exécution typique devrait ressembler à ceci : root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk...

lucky13

Exploit LUCKY13 Ce dépôt contient un exploit proof-of-concept POC pour la vulnérabilité LUCKY13 CVE-2013-0169, qui est une attaque temporelle contre certaines implémentations du mode CBC Cipher Block Chaining dans les systèmes cryptographiques. L'exploit vise à déchiffrer un jeton cible en...

palo-alto-panos-cve-2024-0012

CVE-2024-0012 et CVE-2024-9474 Contournement d'authentification dans l'interface Web de gestion PAN-SA-2024-0015 et injection de commandes authentifiée dans Palo Alto PAN-OS Consultez notre article de blog pour les détails techniques Versions affectées root@kitploit: TBD Auteurs de l'exploit Cet...