CVE-2025-4389

CVE-2025-4389 Exploit Dettagli Pubblicato : 16 maggio 2025 Aggiornato : 17 maggio 2025 Gravità : Critico Punteggio CVSS: 9.8 CWE : CWE-434: CWE-434 Caricamento senza restrizioni di file con tipo pericoloso Versioni interessate : Tutte le versioni dalla n/a fino alla 2.6.8.1 Ricercatore :...

CVE-2025-2907

CVE-2025-2907 Exploit Details Veröffentlicht : 2025-04-04 Aktualisiert : 2025-03-28 Schweregrad : Kritisch CVSS-Score: 9.8 CWE : CWE-862: CWE-862 Fehlende Autorisierung Betroffene Versionen : Alle Versionen von n/a bis 12.3.1 Forscher :...

CVE-2013-3900

Este repositorio nao tem um README...

CVE-2022-35841

CVE-2022-35841 Dies ist nur eine kleine Zusammenfassung mit der Theorie, da dieser Bug kollidiert wurde und ich nie dazu kam, ihn ordentlich zu testen. EnterpriseAppMgmtSvc ist ein interessanter Dienst, der COM-Objekte implementiert. Scheint aus der Windows-Phone-Ära zu stammen, und tatsächlich...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Beschreibung: Eine Cross-Site-Scripting XSS-Sicherheitslücke im Sanitization Management System v1.0 ermöglicht es potenziellen Angreifern, beliebige Dateien über einen manipulierten Namen in die Systemlogo-Felder der Systeminfo-Felder hochzuladen. D...

metasploitable2

Dieses Repository hat keine README-Datei...

CVE-2026-78434

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

CVE-2023-36884

Questo repository non contiene un README...

reactshell

Este repositorio nao tem um README...

CVE-2026-78434

Faveo Helpdesk versions up to 2.0.3 contain a missing authentication flaw in the FormController::post_ticket_reply function within app/Http/Controllers/Client/helpdesk/FormController.php, specifically in the post-ticket-reply Endpoint . An unauthenticated remote attacker can exploit this to achie...

CVE-2026-78434 Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::postticketreply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be...

PEREDBOEMPATAT-BOF

Questo repository non contiene un README...

DEBIAN-CVE-2026-56135

In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...

DEBIAN-CVE-2026-56136

In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...

multicat

Questo repository non contiene un README...

CVE-2025-39247

CVE-2025-39247 الهدف: HikCentral Professional HCMP، خادم VMS مركزي CVE: CVE-2025-39247 — ثغرة في التحكم بالوصول CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N المتأثر: V2.3.1 – V2.6.2 و V3.0.0 المُعالَج: V2.6.3 / V3.0.1 / حزمة الإصلاح CVE-2025-39247 تاريخ الإفصاح: 2025-08-28 تاريخ التحليل:...

Aperisite

Questo repository non contiene un README...

CVE-2026-76816

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.137.Final and 4.2.17.Final, MqttEncoder does not validate client identifiers, will topics, usernames, and PUBLISH topic names before encoding, allowing prohibited null bytes in MQTT UTF-8 string fields and...

CVE-2026-72711

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::addopaque omits the checknometavarnofvar call that the definition and theorem paths perform, so a value containing a free variable that is absent from the local context is not rejected outright. A...

CVE-2026-72711

CVE-2026-72711 is a kernel soundness flaw in Lean 4 before 4.32.2. The function environment::add_opaque omits the check_no_metavar_no_fvar closure check that the definition and theorem paths perform. A metaprogram can exploit a stale entry in the type checker's inference cache to submit an opaque...