CVE-2021-40444

CVE-2021-40444 CVE-2021-40444 POC -----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu0enjPUx4R0+zWyY4FEI 0LUeiAJecPz6iDPdMRiIQHBPZBxKH7A+losAu7DB9IoY1GnGvFJzA1G4UkK6n/rg 2r65Ym3SloHoov/IxC2qcyz1UBftD0HBR8KE9Yy84k1sYIdNzKeWPQETY9UqEEy/...

CVE-2021-40903

Titolo dell'exploit: Antminer Monitor 0.5.0 - Bypass dell'autenticazione CVE: CVE-2021-40903 Data: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Autore dell'exploit: CQR.company / Vulnz. Homepage del fornitore: https://github.com/anselal/antminer-monitor,...

ceph: ceph: MON subscription handler exposes config-key store to low-privilege CephX users

A flaw was found in the MON subscription handler of Ceph, a distributed storage system. The handler does not properly authorize access to the config-key store when processing MMonSubscribe messages. Any CephX user holding mon allow r capabilities can read the entire config-key store, which contai...

CVE-2026-106603

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

fortipwn

fortipwn Forti CVE-2022-40684 Aufzählungsskript, entwickelt in Rust. Lädt einen öffentlichen SSH-Schlüssel in authorizedkeys hoch, sodass ein Angreifer per SSH als Admin auf einen Server mit FortiOS zugreifen kann. Verwendung $ ./fortipwn Erstellung $ git clone https://github.com/Grapphy/fortipwn...

SSH-key-and-RCE-PoC-for-CVE-2021-41773

Chiave SSH e PoC RCE per CVE-2021-41773 Questo repository contiene un Proof-of-Concept PoC per CVE-2021-41773. Questa CVE espone una vulnerabilità di Local File Inclusion LFI e Remote Code Execution RCE. Installazione Assicurati di avere installata la versione 1.23.0 di Go. Costruisci il binario...

EUVD-2026-94930

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

CVE-2026-106603 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

CVE-2023-34362

CVE-2023-34362: MOVEit Transfer RCE non autenticata Per una descrizione tecnica completa della vulnerabilità e dello sfruttamento, si prega di leggere la nostra Analisi di AttackerKB. Utilizzo ruby CVE-2023-34362.rb Nota: il gadget di deserializzazione è configurato per eseguire 'notepad.exe'...

CVE-2024-51378

CVE-2024-51378 — Riepilogo, Mitigazione e Documentazione Repository Sicuro ⚠️ Avvertenza etica e legale Tutto il materiale in questo repository è solo a scopo educativo, di ricerca sulla sicurezza legittima e di test in ambienti di tua proprietà o per i quali hai un'autorizzazione esplicita. Non...

CVE-2023-34040

CVE-2023-34040 Esecuzione di Codice Remoto tramite Deserializzazione in Spring Kafka POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0....

eWeLink-QR-Code

Applicazione mobile eWeLink - Vulnerabilità di controllo degli accessi non corretto CVE-2021-27941 L'accesso Web senza restrizioni alla chiave di crittografia privata del dispositivo nella modalità di pairing tramite codice QR nell'applicazione mobile eWeLink fino alla versione 4.9.2 su Android e...

CVE-2026-87424

A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key...

CVE-2026-85422

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...

EUVD-2026-94795

A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key...

CVE-2026-87424

A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the use of a hard coded cryptographic key...

CVE-2026-87424

A vulnerability exists in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 . The issue stems from the use of a hard-coded cryptographic key , which allows an attacker to bypass authentication across deployments. The vulnerability is addressed in ASCG version 3....

poc-dsa-verify-CVE-2019-17596

Sfruttare dsa.Verify in Go CVE-2019-17596 Vedi il post del blog associato per i dettagli. Esecuzione Dato che le versioni di Go successive alla 1.13.1 sono state corrette, ho incluso un Dockerfile, che rende più facile fissare la versione di Go. Esegui semplicemente Docker build: docker build . C...

EUVD-2026-94787

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at rest and to protect inter-node communication protocols. An attacker who extracts this key can decrypt stored managemen...

CVE-2026-85422

A vulnerability in Brocade ASCG version before 3.5.0 allows an attacker to obtain a static cryptographic key hardcoded into the software binaries. This key is used to secure sensitive data at rest and protect inter-node communication protocols. An attacker successfully extracting this key can dec...