Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting

Mitel ShoreTel 19.46.1802.0 devices and their conference component are vulnerable to an unauthenticated attacker conducting reflected cross-site scripting attacks via the PATHINFO variable to index.php due to insufficient validation for the timezone object in the HOMEMEETING& page. id:...

Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution

Monsta FTP = 2.11 contains an unrestricted file upload vulnerability caused by lack of authentication on file uploads, letting unauthenticated attackers execute arbitrary code by uploading crafted files. id: CVE-2025-34299 info: name: Monsta FTP = 2.11.2 - Unauthenticated Remote Code Execution...

CVE-2019-18634

CVE-2019-18634 CVE-2019-18634 es una vulnerabilidad que afecta a Sudo en versiones 1.8.25 cuando pwfeedback está habilitado en el archivo sudoers. Permite a un atacante escalar privilegios a root explotando un desbordamiento de búfer basado en BSS, donde se alteran las estructuras de datos y el...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — PrivateBin Local File Inclusion via Template Cookie Path Traversal Severity: Medium CVSS v3.1: 5.8 Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected versions: PrivateBin = 1.7.7 Patched version: 2.0.3 CWE: CWE-23 Relative Path Traversal, CWE-73 External Control of File Name or...

CVE-2019-1663-Binary-Analysis

Análisis Binario de CVE-2019-1663 Autor: Corentin Wolff Origen de la Vulnerabilidad Fuente de la Vulnerabilidad La vulnerabilidad se origina en la función 0x0002BF64, que hace un uso indebido de la función strcpy, lo que la hace propensa a ataques de desbordamiento de búfer. Para mayor claridad,...

oss-bounty-program

ProjectDiscovery OSS Bounty Program Purpose The ProjectDiscovery OSS Bounty Program exists to democratize security by rewarding meaningful contributions from the global community. Our tools are used by researchers, defenders, and builders worldwide. This program ensures that anyone, anywhere, can...

copyfailscan

copyfailscan Ayudante de Bash: descubre hosts opcionalmente CIDR mediante nmap, luego realiza comprobaciones SSH de solo lectura para CVE-2026-31431 Copy Fail / algifaead, CVE-2026-31677 / CVE-2026-43077 heurísticas AFALG RX, CVE-2026-23111 nftables + espacios de usuario, CVE-2026-23102 arm64...

CVE-2022-32898

CVE-2022-32898: Múltiple corrupción de memoria del kernel en ANEProgramCreate 23 de noviembre de 2022 • Mohamed GHANNAM @simo36 Comentario del autor Comparto dos vulnerabilidades más del kernel de iOS accesibles desde el sandbox de la app por defecto que no requieren abrir un UserClient: +16...

CVE-2022-46169_poc

CVE-2022-46169 ejecución remota de código no autenticada Descripción Omisión de autenticación: la comprobación de autorización basada en el nombre de host no se implementa de forma segura para la mayoría de las instalaciones de Cacti Inyección de comandos: la entrada del usuario sin sanitizar se...

cve-2024-4367-poc

CVE-2024-4367 POC for PDF.js POC for PDF.js' CVE-2024-4367 vuln - The pdf-modify.py script can be used to modify your PDFs and inject payloads. Usage 1. Ensure CVE-2024-4367-POC-base-placeholder.pdf is in the working directory. 2. Uncomment/modify the payloadnew variable in pdf-modify.py. 3. Run...

By-Poloss..-..CVE-2026-7515-PoC

CVE-2026-7515: BetterDocs Pro views-get"layouts/encyclopedia/$docstyle", 'doc' = $doc, 'excerpt' = $excerpt, 'dictionary...

ROS-20260928-73-0056

The vulnerability of the functions hfsfindinit and hfsbrecfind in the fs/hfsplus/bfind.c module, which is part of Apple’s HFS extended file system support in Linux, stems from the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260928-73-0057

The vulnerability of the setuparch function in the arch/nios2/kernel/setup.c module of the Linux operating system is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0046

The vulnerability of the unixwalkscc function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, stems from the lack of initialization for a variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

xzwhy

xzwhy / / / / \ / /\ This project is a Kubernetes-friendly Proof of Concept POC for CVE-2024-3094 affecting XZ Utils. See this article for an excellent walkthrough of the exploit's provenance and mechanics. WARNING ⚠⚠⚠ Running any of the commands below may result in the deployment of a vulnerable...

gha-lab-fb32aba4a3

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of cocos/cocos-engine at commit...

gha-lab-5bce203f66

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of coreshop/CoreShop at commit...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

CVE-2025-14502 Vulnerability Analysis Report Vulnerability Overview Vulnerability Type : Local File Inclusion LFI Affected Versions : News and Blog Designer Bundle 1.1 and all earlier versions Severity : High Attack Complexity : Low no authentication required Vulnerability Principle Analysis 1...

chef-os-hardening

os-hardening cookbook de Chef 1 2 Descripción Este cookbook proporciona numerosas configuraciones relacionadas con la seguridad, ofreciendo una protección base integral. Configura: Configura la gestión de paquetes, p. ej. solo permite paquetes firmados Elimina paquetes con problemas conocidos...

gha-lab-360f77d0d4

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of LawnchairLauncher/lawnchair at commit...