CVE-2026-79758

The Termix web-based server management platform (versions 1.8.0 through 2.5.1 ) contains a vulnerability where authenticated users can access the server-stats API without per-host authorization. Specifically, the src/backend/ssh/server-stats.ts routes allow users to view host online/offline statu...

CVE-2026-79758 Termix: Authenticated users can read other users' host status and clear global SSH connections

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET...

ios-nehelper-enum-apps-0day

nehelper enumerate installed apps 0-day iOS 15.0 I've updated this code to avoid using Private API directly. Read more in my blog post. However, that means that now this code is iOS version-specific and possibly device model-specific. So if it doesn't work on your device, recalculate and update t...

ios-gamed-0day

iOS gamed exploit fixed in 15.0.2 Update: Apple has quietly fixed this in iOS 15.0.2 without any kind of public acknowledgement or credit. Any app installed from the App Store may access the following data without any prompt from the user: Apple ID email and full name associated with it Apple ID...

pentaho-exploits

Exploits relating to https://research.aurainfosec.io/pentest/pentah0wnage Note: Some things might not work Thanks to my employer Aura Information Security for providing time for me to work on this project...

CVE-2024-28987

CVE-2024-28987 - SolarWinds Web Help Desk Hardcoded Credentials Exploit ⚠️ DISCLAIMER: This tool is for educational and authorized security testing purposes only. Unauthorized access to computer systems is illegal. Use this tool only on systems you own or have explicit permission to test. 📋...

CVE-2026-42533-nginx

CVE-2026-42533 nginx Este repositorio contiene un escáner basado en Go para identificar patrones de configuración de nginx asociados con el problema de captura-sobrescritura de dos pasos de complexvalue descrito en CVE-2026-42533. Descripción general La herramienta analiza archivos y directorios ...

CVE-2026-63203 Logto: Account API can disclose stored third-party provider tokens without the identities scope

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in packages/core/src/routes/account/third-party-tokens.ts allow a caller holding a same-user access token with only the openid scope to retrieve stored social or enterpris...

CVE-2026-81549

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...

CVE-2026-51995

An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components...

CVE-2026-52001

An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts...

CVE-2026-18870

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

git-scan

git-scan This tool is designed to scan and identify whether a website has an exposed ".git" directory, which may contain sensitive information such as source code or Git configuration files. Features Massively scans URLs to find out if the ".git/HEAD" directory is available on the website. Uses...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

CVE-2025-67160

CVE-2025-67160 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware exposes multiple internal web directories without requiring authentication. When directory indexing is enabled on the embedded web server, unauthenticated attackers can access directories such as /cgi-bin/, /view/,...

CVE-2024-9821

CVE-2024-9821 Bot for Telegram en WooCommerce = 1.2.4 - Divulgación autenticada Suscriptor+ del Token del Bot de Telegram que conduce a la Omisión de Autenticación Descripción El plugin Bot for Telegram en WooCommerce para WordPress es vulnerable a la divulgación de información sensible debido a ...

CVE-2025-4578

CVE-2025-4578 File Provider = 1.2.3 - Inyección SQL no autenticada Descripción El plugin File Provider para WordPress es vulnerable a Inyección SQL a través del parámetro 'fileId' en todas las versiones hasta la 1.2.3 inclusive, debido a un escape insuficiente en el parámetro proporcionado por el...

CVE-2024-11396

CVE-2024-11396 Event monster = 1.4.3 - Exposición de información mediante la exportación de la lista de visitantes Descripción El plugin Event Monster – Gestión de eventos, reserva de entradas, próximos eventos para WordPress es vulnerable a la exposición de información en todas las versiones has...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - Sensitive Information Exposure via Log File root@kitploit: Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.2 via a l...

cve-2024-12085

CVE-2024-12085 Exploit de fuga de información Nota, ¡este exploit no es versátil! El módulo objetivo y las sumas de verificación están hardcodeados. El cálculo automático de sumas de verificación aún no se ha implementado. Archivos varios port-forwarding.py está modificado de...