116303 matches found
metagoofil
Metagoofil 2.2 Scritto da Christian Martorella www.edge-security.com [email protected] Che cos'è? Metagoofil è uno strumento per estrarre i metadati di documenti pubblici pdf,doc,xls,ppt,ecc. disponibili nei siti web target. Queste informazioni possono essere utili perché puoi ottenere nomi...
disclosures
Cylance Vulnerability Research - Repository di Divulgazioni Questo è un repository che contiene tutte le divulgazioni pubbliche di vulnerabilità del team di Vulnerability Research di Cylance. La chiave pubblica per l'e-mail del nostro team di Vulnerability Research è riportata di seguito:...
CVE-2023-22855
CVE-2023-22855 Questa vulnerabilità è stata scoperta e divulgata da Nico Viakowski e da me. Questo repository conterrà l'advisory e l'exploit. Questo repository ha solo scopo educativo. Collegamenti Sito del fornitore: https://www.kardex.com/en/mlog-control-center Exploit su Exploit-DB:...
CVE-2022-46463
CVE-2022-46463 Harbor öffentliche Images herunterladen Harbor ist eine Open-Source-Plattform zum Hosten von Container-Images. Dieses Skript listet alle öffentlichen Images auf und unterstützt einen Dump-Vorgang ähnlich docker pull, um das Auffinden sensibler Informationen in öffentlich zugänglich...
POC-CVE-2026-65971
CVE-2026-65971 — SQL-Injection in Livewire PowerGrid über sortDirection Proof-of-Concept und vollständige technische Beschreibung für CVE-2026-65971 / GHSA-7fgc-3h6c-698r , eine SQL-Injection in power-components/livewire-powergrid, die über die öffentliche Livewire-Eigenschaft sortDirection...
CVE-2026-56854
CVE-2026-56854 affects golang.org/x/crypto/ssh . The source-address critical option in Permissions returned by authentication callbacks was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths (extending a prior fix for CVE-2026-46595). Callbacks for PasswordCallback , Keyb...
CVE-2019-11707-PoC
CVE https://vulners.com/cve/CVE-2019-11707...
CVE-2026-46300
CVE-2026-46300 Linux-Kernel-Root-Exploit root@kitploit: git clone https://github.com/ExploitEoom/CVE-2026-46300.git chmod +x exploit ./exploit...
CVE-2026-82236
File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication...
CVE-2026-40204
None None None No publicly available exploits are known...
CVE-2026-40018
None None None No publicly available exploits are known...
EUVD-2026-67588
A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...
CVE-2026-82237
filebrowser through 2.63.23 has a stale-share-link vulnerability: when a shared file is renamed, the share record (keyed by path) is not cleaned up—only deletion triggers cleanup. The record stays dormant (returning 404) until a new, unrelated file appears at the original path via re-upload, anot...
EUVD-2026-67689
filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...
CVE-2026-82237 filebrowser through 2.63.23 Stale Share Link via File Rename
filebrowser through 2.63.23 does not remove share records when a shared file is renamed only deletion triggers share cleanup. The share record is keyed by path, so it survives the rename and remains dormant returning 404 while the path is empty. When any new, unrelated file later appears at the...
EUVD-2026-67688
File Browser versions from 2.63.6 through 2.63.23 fail to clean up public share links when a privileged user deletes another user's shared file. Attackers can access the surviving share link to retrieve new unrelated content uploaded to the same path without authentication...
EUVD-2026-67687
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
CVE-2026-82235
filebrowser through 2.63.23 fails to validate named pipes in its directory archive and public download handlers. This causes blocking open syscalls that pin server goroutines and exhaust connection resources, resulting in a denial of service . Both authenticated users and anonymous visitors with ...
CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes
filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...
