CVE-2021-40375

CVE-2021-40375 - Control de Acceso Roto en OpenEyes 3.5.1 Descripción Se identificó una vulnerabilidad de control de acceso inadecuado en OpenEyes 3.5.1, desarrollado por la Fundación Apperta. Un usuario con pocos privilegios podría cargar el perfil de un paciente en su navegador y acceder a...

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Ir a la página de inicio de sesión 2. Registrar una nueva cuenta, establecer la contraseña como P@$$w0rd!1234 3. Ejecutar el script -u = Correo electrónico de usuario con bajos privilegios Sin 2fa -a = Correo electrónico del administrador -t = URL Ej:...

CVE-2023-29343

CVE-2023-29343 Questo è un PoC per il bug di scrittura arbitraria di file in Sysmon versione 14.14 Dopo l'ultima patch, Sysmon verifica se la directory Archive esiste e, in tal caso, controlla se la directory archive è di proprietà di NT AUTHORITY\SYSTEM e l'accesso è concesso solo a NT...

CVE-2024-22120-RCE

CVE-2024-22120 ToolKit Versioni Affette root@kitploit: 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Crediti https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premessa un utente con privilegi bassi ...

CVE-2026-81668

A flaw was found in Katello where the Content View Filter Rules API does not properly enforce authorization on the parent Content View Filter. An authenticated, low-privileged user with Content View permissions in one organization may be able to access and modify filter rules belonging to a Conte...

CVE-2026-81658

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...

CVE-2023-33253

CVE-2023-33253 LabCollector dalla versione 6.0 alla 6.15 consente l'esecuzione remota di codice Un utente remoto autenticato con privilegi bassi può caricare un file PHP eseguibile ed eseguire comandi di sistema. La vulnerabilità si trova nella funzione message ed è dovuta a una validazione...

privilege-escalation-breach

Progetto di violazione della sicurezza - Escalation dei privilegi La vulnerabilità è in Oracle Solaris, un prodotto di Oracle Systems componente: XScreenSaver. La versione supportata interessata è la 11. È una vulnerabilità facilmente sfruttabile che consente ad attaccanti con privilegi bassi e...

CVE-2026-15742

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`

Summary Budibase 3.39.7 allows a low-privilege authenticated published-app user with the built-in BASIC role to obtain arbitrary S3 pre-signed upload URLs backed by a workspace datasource's stored server-side credentials. The affected endpoint is: POST /api/attachments/:datasourceId/url The calle...

CVE-2024-56071

🚨 Simple Dashboard = 2.0 – Nicht authentifizierte Privilegienerweiterung 📄 Beschreibung Das Simple-Dashboard-Plugin für WordPress ist in allen Versionen bis einschließlich 2.0 anfällig für Privilegienerweiterung. Dadurch können nicht authentifizierte Angreifer ihre Rechte auf Administrator-Ebene...

CVE-2025-65271

CVE-2025-65271 PoC für CVE-2025-65271 Wie ausführen? node server.js Beschreibung Client-seitige Template-Injection CSTI im Admin-Dashboard von Azuriom CMS ermöglicht es einem Benutzer mit niedrigen Berechtigungen, beliebigen Template-Code im Kontext einer Administrator-Sitzung auszuführen. Dies...

Nostromo_Python3

Nostrom RCE Python3: Codice Exploit: Utilizzo: root@kitploit: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

EUVD-2026-65543

Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency...

CVE-2023-32707

CVE-2023-32707 Un POC exploit migliorato basato sulla CVE segnalata su exploitdb Exploit Title: Splunk 9.0.5 - Admin Account Takeover CVE: CVE-2023-32707 Panoramica Questo script consente di sfruttare una vulnerabilità in Splunk 9.0.5, portando all'acquisizione dell'account amministratore...

Johnson Controls Metasys 12.x / 13.x / 14.x < 14.1.5 / 15.x < 15.0.1 Cross-Site Scripting (CVE-2026-34491)

A low-privilege user can inject a malicious XSS payload into the Johnson Controls Metasys UI via a crafted URL. The payload persists across logins and executes in the browser context of other users, including administrators. Successful exploitation of this vulnerability could allow a low-privileg...

UBUNTU-CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can ex...

CVE-2026-55491 BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name

BigBlueButton is an open-source virtual classroom. Prior to 3.0.29, BigBlueButton failed to escape meetingName in record-and-playback/screenshare/playback/index.html.erb when generating the screenshare playback format. A low-privileged user could store a crafted meeting name that embedded script...

PT-2026-79192

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 3.0.29 Description An issue exists where the software fails to escape the meetingName variable in the record-and-playback/screenshare/playback/index.html.erb file during the generation of the screenshare playbac...

PT-2026-78907

Name of the Vulnerable Software and Affected Versions Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 affected versions not specified Description An issue exists where improper enforcement of role-based access control allows a low privileged remote attacker with a valid session to create new...