CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket Unbefugte Methodenausführung PoC 🛠️ Übersicht CVE-2026-5173 erlaubt es einem niedrig-privilegierten authentifizierten Angreifer, eingeschränkte Backend-Methoden über den WebSocket-Endpunkt /-/cable von GitLab aufzurufen, insbesondere über den GraphqlChannel...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – XSS armazenado no Decap CMS Passos...

CVE-2026-78237 Insufficient input validation in Admin By Request (ABR)

Admin By Request (ABR) for macOS is affected by an insufficient input validation flaw (CVE-2026-78237, CVSS 7.8 HIGH ). A low-privileged local user can inject malicious entries into the sudoers file during an ABR session, granting persistent root access that remains effective even after the eleva...

CVE-2024-3183-POC

CVE-2024-3183-POC POC für CVE-2024-3183 FreeIPA Rosting Auswirkungen: Ein Benutzer mit niedrigen Berechtigungen kann einen Hash der Passwörter aller Domänenbenutzer erhalten und einen Offline-Brute-Force-Angriff durchführen Kerberoasting. Patch für impacket-getTGT: 1. Fügen Sie...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descrição : Explorando um ataque de Cross-site request forgery CSRF para criar um usuário privilegiado através do recurso de adicionar usuários do Webmin, obtendo então um shell reverso através do recurso de processos em execução do Webmin Versão Testada : Webmi...

CheeseTools

CheeseTools Questo repository è stato creato basandosi sul già esistente MiscTool, quindi un grande ringraziamento a rasta-mouse per averli rilasciati e per avermi dato la giusta motivazione per lavorarci. CheeseExec Esecuzione comandi / Movimento laterale tramite funzionalità simile a PsExec. De...

EUVD-2026-65339

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

CVE-2026-77137 SQL Injection in extension "Forms Export" (frp_form_answers)

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

CVE-2026-77137

CVE-2026-77137 is a SQL injection vulnerability in the TYPO3 extension "Forms Export" (extension key: frp_form_answers ). The extension fails to properly sanitize user input before using it in a database query, allowing a low-privileged backend user to inject arbitrary SQL through a URL parameter...

CVE-2024-22120-RCE-with-gopher

Verwendung root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Beispielszenario Sie haben einen Zabbix-Server unter der IP 192.168.1.100 identifiziert und haben Zugriff auf einen Benutzer mit niedrigen Privilegien mit den folgenden Details: Sitzungs-ID sid:...

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

CVE-2026-34213

CVE-2026-34213 Un utente Docmost con privilegi ridotti potrebbe fornire un attachmentId vittima all'endpoint di upload generico e sovrascrivere un allegato memorizzato di un'altra pagina nello stesso spazio di lavoro. Introduzione Ho identificato, divulgato in modo responsabile e riprodotto un...

CVE-2021-32160

..| XSS para usuário privilegiado |.. Descrição : Explorando um ataque de Cross-Site Scripting XSS refletido para criar um usuário privilegiado por meio do recurso de adição de usuários do Webmin e, em seguida, obtendo um shell reverso por meio do recurso de processos em execução do Webmin Versão...

EUVD-2026-64248

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

CVE-2026-66917

JoomGallery (a Joomla extension) versions prior to 4.3.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. An authenticated user with privileged access can embed an XSS payload in any image, resulting in JavaScript execution in the browser of every visitor who views the affected ...

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser...

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

PT-2026-79296

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...