CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket अनधिकृत विधि निष्पादन PoC 🛠️ अवलोकन CVE-2026-5173 निम्न-विशेषाधिकार वाले प्रमाणित हमलावर को GitLab के WebSocket /-/cable एंडपॉइंट के माध्यम से, विशेष रूप से GraphqlChannel के ज़रिए, प्रतिबंधित बैकएंड विधियों को कॉल करने की अनुमति देता है।...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Decap CMS में संग्रहीत XSS चरण 1. कंट्रीब्यूटर/एडिटर कम विशेषाधिकार के रूप में लॉगिन करें।...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descrição : Explorando um ataque de Cross-site request forgery CSRF para criar um usuário privilegiado através do recurso de adicionar usuários do Webmin, obtendo então um shell reverso através do recurso de processos em execução do Webmin Versão Testada : Webmi...

CheeseTools

CheeseTools Este repositório foi criado com base no já existente MiscTool, então um grande agradecimento ao rasta-mouse por ter lançado essas ferramentas e por me dar a motivação certa para trabalhar nelas. CheeseExec Execução de comandos / Movimentação lateral através de funcionalidade semelhant...

CVE-2024-3183-POC

CVE-2024-3183-POC إثبات مفهوم لـ CVE-2024-3183 FreeIPA Rosting التأثير: يمكن لمستخدم ذي صلاحيات منخفضة الحصول على تجزئة hash لكلمات مرور جميع مستخدمي المجال وتنفيذ هجوم قوة عمياء غير متصل kerberoasting. تصحيح impacket-getTGT: 1. أضف decoder.decode.defaultErrorState = stGetValueDecoderByTag إلى...

CVE-2026-77137

CVE-2026-77137 is a SQL injection vulnerability in the TYPO3 extension "Forms Export" (extension key: frp_form_answers ). The extension fails to properly sanitize user input before using it in a database query, allowing a low-privileged backend user to inject arbitrary SQL through a URL parameter...

EUVD-2026-65339

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

CVE-2026-77137 SQL Injection in extension "Forms Export" (frp_form_answers)

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

CVE-2024-22120-RCE-with-gopher

उपयोग root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime उदाहरण परिदृश्य आपने IP 192.168.1.100 पर चल रहे एक Zabbix सर्वर की पहचान की है, और आपके पास निम्नलिखित विवरण वाले निम्न-विशेषाधिकार वाले उपयोगकर्ता तक पहुंच है: सत्र आईडी sid: d82bf6715e1d3c1f25 होस्ट आई...

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

CVE-2026-34213

CVE-2026-34213 Um usuário do Docmost com baixos privilégios poderia fornecer um attachmentId de uma vítima para o endpoint genérico de upload e sobrescrever um anexo armazenado de outra página dentro do mesmo workspace. Introdução Identifiquei, divulguei de forma responsável e reproduzi uma falha...

CVE-2021-32160

..| XSS से विशेषाधिकार प्राप्त उपयोगकर्ता |.. विवरण : एक प्रतिबिंबित क्रॉस-साइट स्क्रिप्टिंग XSS हमले का उपयोग करके Webmin के उपयोगकर्ता जोड़ें सुविधा के माध्यम से एक विशेषाधिकार प्राप्त उपयोगकर्ता बनाना और फिर Webmin की चल रही प्रक्रिया सुविधा के माध्यम से एक रिवर्स शेल प्राप्त करना परीक्षित...

EUVD-2026-64248

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

CVE-2026-66917

JoomGallery (a Joomla extension) versions prior to 4.3.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. An authenticated user with privileged access can embed an XSS payload in any image, resulting in JavaScript execution in the browser of every visitor who views the affected ...

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

PT-2026-79296

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

PT-2026-79295

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...