CVE-2026-61468

A vulnerability in the MigTD logging for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor involves improper privilege management (CWE-269). This flaw may allow a system software adversary with privileged user access to perform a low-complexity attack resulting in informat...

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

CheeseTools

CheeseTools This repository has been made basing onto the already existing MiscTool1, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context...

CVE-2026-112169 Undocumented backdoor allows authentication bypass in Magistra software

Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification...

CVE-2026-12737

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-12737 IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

EUVD-2026-119677

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2026-12737

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1_1 are affected by a vulnerability (CWE-532) where potentially sensitive information is stored in log files. This information could be accessed by a local privileged user . To remediate this, users should ap...

PT-2026-140049

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.1 1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.1 1 stores potentially sensitive information in log files that could be read by a local privileged user...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Stored XSS in Decap CMS Steps 1. Login as Contributor/Editor low privilege. 2. Create a new blog entry. 3. Insert the payload into one of the vulnerable fields e.g., title. 4. Save the entry. 5. Login as Admin high privilege. 6. Open the entry in Preview. 7. Payload executes in t...

CVE-2024-22120-RCE-with-gopher

Usage python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Example Scenario You have identified a Zabbix server running on IP 192.168.1.100, and you have access to a low-privileged user with the following details: Session ID sid: d82bf6715e1d3c1f25 Host ID hostid: 10107 PHP...

CVE-2026-34213

CVE-2026-34213 A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace. Intro I identified, responsibly disclosed, and reproduced a High-severity authorization flaw in Docmost , the...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When CONFIGBPFLSM=y is set, BPF inode storage maps BPFMAPTYPEINODESTORAGE are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at...

CVE-2026-63017: Subnet Solutions: Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally…

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators...

CVE-2026-120715

Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authenticated low-privileged user to capture the NetNTLMv2 hash of the DVLS service account via an attacker-controlled domain name in the request...

CVE-2026-95770

A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain preconditions outside of the attacker's control are met. Successful...

CVE-2026-95730

A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected system...

EUVD-2026-116207

A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected system...

EUVD-2026-116187

A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain preconditions outside of the attacker's control are met. Successful...