CVE-2017-6206

CVE-2017-6206 Il firmware della serie di switch Websmart DGS-1510 è risultato avere vulnerabilità di sicurezza. Le vulnerabilità includono il bypass dei comandi senza autenticazione e la divulgazione di informazioni senza autenticazione. exploit.sh contiene sia il codice PoC e creerà un utente...

cve-2020-10977-read-and-execute

CVE-2020-10977 قراءة وتنفيذ حول CVE-2020-10977 تقرير HackerOne: https://hackerone.com/reports/827052 Exploit-DB: https://www.exploit-db.com/exploits/48431 كيفية إعادة إنتاج جزء التنفيذ يدويًا: من القراءة إلى التنفيذ حول هذا المستودع getsecret.py - النص الرئيسي. يستخدم كود thewhiteh4t لاستغلال...

CVE-2024-23897

اقرأ أول 3 أسطر من أي ملف لديه إذن قراءة للمستخدم الحالي على النظام. النص البرمجي يستخدم proxychains داخليًا. الاستخدام: python CVE-2024-23897.py مثال: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/ /var/lib/jenkins/secrets/master.key...

CVE-2026-64849.yaml

id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Lettura completa non autenticata tramite bypass di reindirizzamento author: DhiyaneshDk severity: critical description: | MLflow 3.15.0 contiene una vulnerabilità di divulgazione di informazioni causata dalla convalida impropria degli URL dei...

CVE-H3C-Report

H3C GR-Serie Router Systemverwaltung weist Schwachstelle für unbefugten Zugriff auf Produkt : GR-Serie Router Version : alle Bewertung : hohes Risiko Webseite : http://www.h3c.com/ Gefahren : Angreifer können diese Schwachstelle ausnutzen, um sensible Informationen von Routern zu erlangen, indem...

BEAST-PoC

BEAST-PoC attacco a testo scelto Questa prova di concetto è incentrata sulla crittografia alla base dell'attacco BEAST Browser Exploit Against SSL/TLS presentato da Thai Duong e Juliano Rizzo il 23 settembre 2011. Si tratta di un attacco a testo scelto e consente di recuperare informazioni...

PT-2026-82328

HCL Connections is vulnerable to server-side request forgery SSRF when an internal server is compromised possibly allowing an attacker to send unauthorized requests in certain scenarios leading to information disclosure or security bypass...

PT-2026-82359

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include subtree to the GET /v3/role assignments endpoint. The domain's project record has...

PT-2026-82330

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...

CVE-2026-75415

AntFlow V2.0.0 suffers from an Incorrect Access Control flaw in the file JiMuMDCCommonsRequestLoggingFilter.java . This component retrieves the userid from the request header and uses it as the core identity verification mechanism . Because the header value is not independently validated, an atta...

EUVD-2025-210785

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...

CVE-2025-61164

Cohere North AI v1.1.5 was found to contain an information leak via its WebSocket Endpoint . The vulnerability allows unauthorized exposure of data through the WebSocket communication channel, though the specific data types leaked and the severity impact are not detailed in the provided documents...

PT-2026-81927

When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...

CVE-2024-1208-and-CVE-2024-1210

CVE-2024-1208 e CVE-2024-1210 Esposizione di informazioni sensibili tramite API in LearnDash. I visitatori non autenticati possono sfogliare i quiz e le domande dei quiz senza essere iscritti a un corso collegato. Vulnerabilità: CVE-2024-1208 e CVE-2024-1210 Esposizione di informazioni sensibili...

CVE-2024-24919-POC

CVE-2024-24919-POC Un semplice strumento per automatizzare CVE-2024-24919 Esposizione di Informazioni Sensibili Caratteristiche Facile da usare. Commenti utili; può testare più domini Uso root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd...

CVE-2024-44542

CVE-2024-44542 Descrizione: è stato scoperto che todesk v1.1 contiene una vulnerabilità di SQL injection tramite il parametro title in /todesk.com/news.html. Tipo di vulnerabilità: SQL Injection Produttore: todesk Versione prodotto affetta: todesk - v1.1 Componente affetto: todesk.com, news.html...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak 📌 Repository di documentazione tecnica e risorse sulla vulnerabilità di Format String nel server Telnet di Green Hills INTEGRITY RTOS v5.0.4. 📖 Descrizione Generale La vulnerabilità colpisce il server IPCOMShell Telnet di Interpeak in...

CVE-2026-80198

Kimai versions before 2.56.0 fail to properly restrict the config() Twig function within sandboxed invoice and export templates. This allows users with admin privileges to upload malicious templates that read arbitrary configuration keys, potentially exfiltrating sensitive server-wide secrets suc...

CVE-2026-80194

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route (report_project_view_export). Authorization guards are attached to the sibling __invoke method rather than at the class level, leaving the export route without any authorization checks. As...

CVE-2026-80194 Kimai before 2.64.0 Missing Authorization via ProjectViewController export

Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export route reportprojectviewexport. The authorization guards are attached to the sibling invoke method rather than at the class level, so the export route inherits no authorization checks. Any...