840942 matches found
CVE-2026-87106
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...
CVE-2026-87107
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with service:write or node:write permission may exploit this issue to remove services, checks, or nodes...
-Pluck-CMS-RCE-CVE-2023-50564
exploit.py 🐍💥 ⚠️ Aviso legal / ético: este script es solo para entornos autorizados ✅ CTFs, laboratorios, pentesting con permiso. No lo uses contra sistemas sin autorización ❌. 🧾 ¿Qué hace este script? exploitgreenhorn.py automatiza una cadena de explotación típica en un panel web: ✅ Hace login en...
Drupalgeddon2-CVE-2018-7600
🔥 Drupalgeddon 2 Exploit — bixi.py 📖 Descripción bixi.py es un exploit para la vulnerabilidad CVE‑2018‑7600 Drupalgeddon 2 que afecta a Drupal 7. Permite la ejecución remota de comandos RCE en servidores Drupal vulnerables mediante una interfaz intuitiva y comandos predefinidos. ⚠️ DISCLAIMER /...
CVE-2025-10351-POC
CVE-2025-10351 POC - Exploit de Inyección SQL 💉 POC para CVE-2025-10351: Una vulnerabilidad de Inyección SQL no autenticada que afecta a un endpoint específico en el Framework de la Plataforma Melis. 🔗 Referencias 📄 CVE-2025-10351 en MITRE 📄 Aviso de la Plataforma Melis en INCIBE Instituto Nacion...
CVE-2025-5548-Exploit-Development
CVE-2025-5548 - Laboratorio de Desarrollo de Exploits Este repositorio documenta el proceso de configurar un entorno de trabajo para el análisis de vulnerabilidades y el desarrollo de exploits, y aplicarlo a un caso práctico de desbordamiento de búfer. El proyecto se basa en FreeFloat FTP Server...
CVE-2026-87107
Consul and Consul Enterprise are affected by an authorization bypass in the catalog deregistration path. A caller holding only service:write or node:write ACL permissions can deregister peer-imported catalog objects (services, checks, or nodes) without possessing authority over the originating pe...
EUVD-2026-75699
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with service:write or node:write permission may exploit this issue to remove services, checks, or nodes...
CVE-2026-87107 Consul vulnerable to an authorization bypass in the catalog deregistration path
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with service:write or node:write permission may exploit this issue to remove services, checks, or nodes...
CVE-2026-87107 Consul vulnerable to an authorization bypass in the catalog deregistration path
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with service:write or node:write permission may exploit this issue to remove services, checks, or nodes...
CVE-2026-87107 Consul vulnerable to an authorization bypass in the catalog deregistration path
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-imported catalog objects. A caller with service:write or node:write permission may exploit this issue to remove services, checks, or nodes...
HTB-Pterodactyl-Writeup
Informe de Prueba de Penetración — HackTheBox: Pterodactyl Fecha: 8 de abril de 2026 Objetivo: Pterodactyl HackTheBox Dificultad: Media SO: Linux openSUSE Leap 15.6 Evaluador: V0idW1re Resumen Ejecutivo La máquina Pterodactyl en HackTheBox presentó un escenario de ataque realista que involucraba...
CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...
CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...
EUVD-2026-75680
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...
CVE-2026-87106
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener . An authenticated client that can complete the internal RPC mTLS handshake may exhaust server memory before ACL authorization is evaluated , meaning a valid ACL token is not strictly required to trigger...
CVE-2026-87106 Consul vulnerable to a denial of service in the native RPC listener
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory before ACL authorization is evaluated. A client that can complete the internal RPC mTLS handshake may exploit this issue without holding a...
CVE-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...
CVE-2026-87090 Consul vulnerable to an authorization bypass in the catalog node-write path
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...
CVE-2026-87090
Consul and Consul Enterprise (HashiCorp) are affected by an authorization bypass in the catalog node-write path . An authenticated attacker holding a token with node-write permission on any single node name can, if they obtain the node ID of a node they do not control, delete that node's catalog ...