CVE-2026-80212

CVE-2026-80212 is a memory exhaustion vulnerability in the resolv gem before 0.7.2 for Ruby. The root cause is that Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create permanently register a new class for every unknown DNS resource rec...

SharpSCOM

SharpSCOM Uno strumento C per interagire con Microsoft System Center Operations Manager SCOM. Questo strumento è stato testato con il server SCOM versione 10.22.10118.0. L'integrazione SSPI è fornita tramite la libreria nsspi di Kevin Thompson antiduh, rilasciata sotto licenza BSD-2. Utilizzo da...

CVE-2021-46362

CVE-2021-46362: Iniezione di Template Lato Server FreeMarker in Magnolia CMS Una vulnerabilità di iniezione di template lato server SSTI nei moduli di registrazione e di password dimenticata di Magnolia v6.2.3 e versioni precedenti consente ad attaccanti non autenticati di eseguire codice...

CVE-2025-70899

Questo repository contiene la Proof of Concept che dimostra la vulnerabilità di protezione CSRF mancante nel PHPgurukul Online Course Registration System. 📄 Visualizza la PoC completa qui: MissingCSRFprotectionpoc.md...

CVE-2026-61466

A flaw was found in Apache CXF. The OAuth2 Dynamic Client Registration endpoint in Apache CXF does not properly validate the scope value provided during client registration. This oversight allows a malicious client to assign itself privileged access scopes, potentially leading to unauthorized...

CVE-2026-59354

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possess...

CVE-2026-1492

CVE-2026-1492 - Exploit di Privilege Escalation per il Plugin WordPress User Registration Descrizione Questo repository contiene un proof-of-concept per lo sfruttamento di CVE-2026-1492 , una vulnerabilità critica che interessa il plugin WordPress User Registration & Membership. La vulnerabilità...

CVE-2025-59287-WSUS

CVE-2025-59287-WSUS versione powershell del POC exploit hawktrace https://hawktrace.com/blog/CVE-2025-59287-UNAUTH 1: modifica le variabili nello script url, porta, ecc. 2: avvia il listener netcat 3: esegui lo script - scaricherà automaticamente ysoserial.net, genererà il payload e invierà...

WordPress User Registration & Membership plugin < 5.2.6 - Unauthenticated Account Creation While Registration Disabled vulnerability

Unauthenticated Account Creation While Registration Disabled vulnerability discovered by Nguyễn Đức Hòa in WordPress Plugin User Registration versions 5.2.6...

EUVD-2026-66977

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possess...

CVE-2026-59354 Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possess...

CVE-2026-59354

Spring Security's OAuth2 Authorization Server module (versions 7.0.0 through 7.0.4 ) is affected by insufficient validation of client metadata fields at the Dynamic Client Registration endpoint. When Dynamic Client Registration is explicitly enabled, an attacker holding a valid Initial Access Tok...

EUVD-2026-66480

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

EUVD-2026-66474

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

Strumento di Exploit per CVE-2026-1529 Keycloak Keycloak: registrazione non autorizzata di organizzazioni tramite validazione impropria del token di invito Disclaimer Questo strumento è destinato esclusivamente a scopi educativi e di test di sicurezza. Utilizzalo solo su sistemi per cui hai...

CVE-2026-7401-XSS

Stored XSS im CET Automated Grading System — Studentenregistrierung ohne Authentifizierung → Admin-Dashboard Details...

archivo-syxe05-snat

SyXe'05 / Snat Reverse Engineering Archiv Historisches Archiv von Tutorials zu Reverse Engineering und Unpacking , ursprünglich unter den Aliasnamen SyXe'05 und später Snat verfasst. Die Texte wurden ursprünglich in verschiedenen technischen Communities dieser Zeit veröffentlicht, hauptsächlich...

OutOfTune

OutOfTune Ispirato dall'originale Pytune, OutOfTune registra un dispositivo rogue in Entra ID, lo iscrive a Intune MDM e verifica lo stato di conformità risultante. Supporta solo dispositivi Windows poiché era il mio obiettivo principale, potrebbe aggiungerne altri in futuro. Blog di...

CVE-2025-2563

CVE-2025-2563 — User Registration & Membership | Escalonamento de Administrador em Cadeia Completa root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║...

CVE-2026-1529

Ferramenta de Exploração CVE-2026-1529 Keycloak CVE-2026-1529 : Keycloak - Registro não autorizado de organização via validação inadequada de token de convite ⚠️ AVISO : Esta ferramenta é apenas para fins educacionais e de testes de segurança autorizados. O acesso não autorizado a sistemas de...