CVE-2025-2304-POC

CVE-2025-2304 PoC - Camaleon CMS 権限昇格 Camaleon CMS の重大なマスアサインメント脆弱性 CVE-2025-2304 の Proof of Concept PoC エクスプロイトです。低権限ユーザーから管理者への権限昇格を可能にします。 root@kitploit: ██████╗ ██████╗ ██╗ ██╗███╗ ██╗ ██████╗ ███╗ ███╗██╗ ██╔══██╗╚════██╗██║ ██║████╗ ██║██╔═████╗████╗ ████║██║ ██║ ██║ █████╔╝██║ ██║██╔██╗...

CVE-2025-2304-exploit

CVE-2025-2304 - Escalada de Privilegios por Asignación Masiva en Camaleon CMS 📌 Descripción del Proyecto CVE-2025-2304 es una vulnerabilidad de Asignación Masiva Mass Assignment en Camaleon CMS versiones 2.9.1 que permite a un usuario autenticado elevar sus privilegios a administrador manipulando...

CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Massenzuweisungs-Privilegienerweiterung PoC Privilegienerweiterungsschwachstelle in Camaleon CMS /updatedajax senden, bei der passwordrole=admin in die Passwortparameter injiziert wird. 4. Überprüfen, ob die Rolle auf admin aktualisiert wurde. Anforderungen Python 3...

CVE-2025-2304

Camaleon CMS 2.9.0 – Escalação de Privilégio Autenticada Alteração de Função + Vazamento Opcional de Config S3 Alvo: Camaleon CMS v2.9.0 Tipo: Escalação de privilégio autenticada via mass-assignment em updatedajax campo role Extras: Extração opcional da configuração S3 da página de configurações ...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Exploit di Escalation dei Privilegi Panoramica Questo script Python sfrutta una vulnerabilità critica di mass assignment in Camaleon CMS versione 2.9.0, consentendo a qualsiasi utente registrato di elevare i propri privilegi ad amministratore. Dettagli della...

SUSE-SU-2026:22978-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when sftp server:/path . is used with an attacker-controlled server bsc1271044. - CVE-2026-59996: scp: file placed in the parent directory of an intended target...

openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options

A flaw was found in sshd, the OpenSSH server daemon. When DisableForwarding=yes is configured to prevent network traffic forwarding, it incorrectly fails to take precedence over PermitTunnel=yes. This allows a remote attacker to bypass intended security restrictions and establish a tunnel,...

SUSE CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

Use of Less Trusted Source

Overview Affected versions of this package are vulnerable to Use of Less Trusted Source due to improper validation of the interaction between DisableForwarding and PermitTunnel settings. An attacker can enable unauthorized tunneling by exploiting a misconfiguration where DisableForwarding does no...

CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

UBUNTU-CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

Brave Desktop 1.90.128 Security Fixes

Updated wallet to handle more "Permit" type warnings in the "Sign" panel as reported on HackerOne by syarif07. - Fix wallet provider binding issue as reported on HackerOne by shinchan69. Upgraded Chromium to 148.0.7778.217 — refer to Google Chrome advisories for inherited CVEs...

CVE-2024-41736

Under certain conditions SAP Permit to Work allows an authenticated attacker to access information which would otherwise be restricted causing low impact on the confidentiality of the application...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

EUVD-2025-131927

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that stems from unfiltered input in the permitno field, which could lead to an SQL...