430031 matches found
EUVD-2026-67042
opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...
CVE-2026-81686 openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypass
opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...
EUVD-2026-67036
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680 openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680 openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680 openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
opensslencrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silent...
CVE-2026-81680
openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files. An attacker with write access to the file header can delete recovery-slot fields and bypass authentication without re-encrypting the payload, silently removing recovery paths the ...
EUVD-2026-67034
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...
CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...
CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...
CVE-2026-81678
AVideo versions prior to 24.0 contain a server-side request forgery (SSRF) vulnerability in the isSSRFSafeURL function. The flaw is that this function fails to extract embedded IPv4 addresses when they are encoded within NAT64 , 6to4 , and Teredo IPv6 transition address formats. Unauthenticated a...
CVE-2026-81678 AVideo SSRF Guard Bypass via IPv6 Transition Addresses
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...
SUSE-SU-2026:2641-1 Security update for apache2
This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...
cve-2016-1764
Codice Exploit PoC per CVE-2016-1764 Recupero dei dati iMessage in chiaro senza violare la crittografia Autori Shubham Shah di Bishop Fox Joe DeMesy di Bishop Fox Matthew Bryant CVE-2016-1764 Vendor: Apple Data di rilascio: 8 aprile 2016 Data della patch: 21 marzo 2016 Sistemi interessati: Messag...
CVE-2025-45805
CVE-2025-45805 PoC di CVE-2025-45805 Prodotto interessato: Doctor Appointment Management System Vendor: phpgurukul Versione: 1.0 Tipo di vulnerabilità: Stored Cross-Site Scripting XSS Descrizione: Un medico autenticato può iniettare codice JavaScript arbitrario nel campo del profilo del medico...
CVE-2017-1000486
CVE-2017-1000486 Exploit Proof of Concept per l'iniezione EL in PrimeFaces 5.x CVE-2017-1000486, una vulnerabilità RCE che può essere utilizzata per ottenere Remote Code Execution su un target. Descrizione della vulnerabilità Puoi trovare un'ottima descrizione della vulnerabilità sul blog di Mind...
CVE-2015-9251
CVE-2015-9251 [email protected] PoC per CVE-2015-9251 jQuery precedente alla 3.0.0. CVE-2015-9251 - PoC Exploit Questo repository contiene una Proof of Concept PoC per la vulnerabilità CVE-2015-9251 nella libreria jQuery. La vulnerabilità consente un attacco di Cross-Site Scripting XSS trami...
CVE-2018-3639
CVE-2018-3639 Bypass speculativo del negozio CVE-2018-3639 proof of concept per Linux Scarica root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git Compila root@kitploit: cd CVE-2018-3639 make Esegui root@kitploit: ./specter Output root@kitploit: $ ./spectre idx: 0, highest:P,...
CVE-2020-26061
CVE-2020-26061 Bypass dell'autenticazione del portale di reimpostazione password di ClickStudios Passwordstate Informazioni Fornitore: ClickStudios Prodotto: Passwordstate Versioni interessate: Prima della build 8501 della versione 8.5 Ricercatore: Jason Juntunen aka @missing0x00...
pwn2own2020
Compromettere il kernel di macOS tramite Safari concatenando sei vulnerabilità Panoramica Questo repository contiene i dettagli di sfruttamento e tecnici della nostra sottomissione vincente al Pwn2Own 2020 che ha preso di mira Apple Safari con un'escalation dei privilegi del kernel per macOS...