CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Переполнение буфера RCE Обзор Переполнение стека буфера в CWMP TR-069, приводящее к удаленному выполнению кода. Поле| Значение ---|--- Продукт| TP-Link AX10, AX1500 Затронутые версии| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D ...

thm-Moniker-Link-cve-2024-21413-writeup

TryHackMe: Moniker Link CVE-2024-21413 경로: Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 난이도: Premium room 중점: Outlook Protected View 우회, NTLM 해시 유출, Responder를 이용한 자격 증명 캡처 CVE-2024-21413 은 Microsoft Outlook이 특수하게 조작된 하이퍼링크를 처리하는 방식에 영향을 미치는 치명적인 취약점입니다. file:// Moniker...

CVE-2020-10882

Ссылки для справки https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3528)

A vulnerability in the OSPF Version 2 OSPFv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

Cisco ASA Cross-site Scripting (CVE-2020-3580)

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

Cisco ASA/FTD Cross-site Scripting (CVE-2020-3583)

Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Уязвимость повышения привилегий в Microsoft Defender RedSun — это техника локального повышения привилегий LPE и соответствующий PoC, использующие уязвимость перехода по ссылкам в движке защиты от вредоносных программ Microsoft Defender. Она позволяет аутентифицированному...

CVE-2026-105696

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that the caller-selected page-id belongs to the link's authorized pages set. An attacker with both a valid share link and...

CVE-2026-105693

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

CVE-2026-105692

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

CVE-2026-105693 Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

CVE-2026-105693

The open-source design and prototyping platform Penpot is vulnerable to an anonymous share-link token disclosure and page-scope bypass in versions prior to 2.18.0 . The unauthenticated get-view-only-bundle RPC incorrectly returns every share-link row for a file, even when a caller authenticates w...

CVE-2026-105693 Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

CVE-2026-105692 Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

CVE-2026-105692 Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

CVE-2026-105692

The open-source design and prototyping platform Penpot contains an IDOR vulnerability in its delete-share-link RPC before version 2.18.0 . The application fails to verify if a caller is the creator of a share-link or possesses administrator authority, checking only if the caller can edit the pare...

CVE-2026-105692 Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

EUVD-2026-92776

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-comment-threads, get-comment-thread, and get-comments RPC commands use check-comment-permissions! but do not apply the share link's pages restriction. A holder of a page-scoped share link can retrieve comment threa...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - эксплойт для TPlink Здесь представлены файлы, использованные для эксплуатации маршрутизатора TPlink Archer на Pwn2Own 2020 Tokyo. Уязвимость имеет номер CVE-2021-27246. Вы можете ознакомиться с постом в блоге на сайте synacktiv для получения подробностей...

dlink-dir610-exploits

Эксплойты для CVE-2020-9376 и CVE-2020-9377 https://vulners.com/cve/CVE-2020-9377 https://vulners.com/cve/CVE-2020-9376 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182...