CVE-2026-76943

CVE-2026-76943 affects the Xiiaozet LK100W (LK100Wt) device, which contains an authentication weakness in an administrative service that allows an attacker to bypass access controls and obtain command execution capabilities. Successful exploitation could lead to unauthorized interaction with priv...

jsonorg-fp2

json.org CVE-2022-45688 Fehlalarm Das Projekt enthält eine json.org-Abhängigkeit mit CVE-2022-45688. Sie ruft zwar die verwundbare Klasse auf, aber die Eingabedaten sind fest verdrahtet und nicht geeignet, einen DoS-Angriff auszulösen. Die Schwachstelle kann daher nicht für einen DoS-Angriff...

CVE-2019-0708-EXPloit-3389

CVE-2019-0708-EXPloit-3389 RemotedesktopRDP-Dienst RemotecodeausführungsschwachstelleCVE-2019-0708...

CVE-2022-4896

CVE-2022-4896 PoC & exploit per CVE-2022-4896 "Control de Ciber" è un software di gestione per cybercafè. Molteplici vulnerabilità Denial-of-Service DoS sono presenti nelle versioni precedenti alla 1.650. Un attaccante remoto non autenticato può inviare una richiesta appositamente predisposta che...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & Exploits für CVE-2022-48474 & CVE-2022-48475 „Control de Ciber“ ist eine Verwaltungssoftware für Internetcafés. Mehrere Denial-of-Service DoS Schwachstellen in Versionen vor 1.650. Ein nicht authentifizierter entfernter Angreifer kann eine sorgfältig...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Titolo dell'exploit: Vehicle Service Management System - 'Elenco utenti' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xs...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Titolo Exploit: Vehicle Service Management System - 'Settings' Cross Site Scripting XSS memorizzato Autore Exploit: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 Titolo dell'exploit: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Titolo dell'exploit: Vehicle Service Management System - Cross Site Scripting XSS Memorizzato in 'MyAccount' Autore dell'exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Riferimenti:...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Titolo dell'exploit: Vehicle Service Management System - Caricamento 'multiplo' di file porta a Cross-Site Scripting persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' File upload Leads to Html Injection Autore dell'exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH Riferimenti: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injectio...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Titolo dell'exploit: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Autore dell'exploit: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH Riferimenti: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-executio...

Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46071 Titolo dell'Exploit: Vehicle Service Management System - 'Elenco Categorie' Cross-Site Scripting Memorizzato XSS Autore dell'Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM Riferimenti:...

CVE-2021-46079

CVE-2021-46079 Titolo dell'Exploit: Vehicle Service Management System - 'Multiplo' Caricamento file porta a Iniezione HTML Autore dell'Exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTO Riferimenti:...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-è-vulnerabile-ad-attacco-Denial-of-Service-DoS CVE-2020-25478 - Il TFTP di ASUS RT-AC87U è vulnerabile ad un attacco Denial of Service DoS 1. NOME DEL PRODOTTO/I AFFETTO/I E DELLA VERSIONE/E ASUS RT-AC87U 3.0.0.4.38251640 2. TIPO DI PROBLEMA È principalmente correlato a CWE-20,...

CVE-2026-80179 Jwcrypto: jwcrypto: denial of service via malformed jwe tokens

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

CVE-2026-80179

CVE-2026-80179 is a denial of service vulnerability in the jwcrypto Python library. A remote attacker can craft a malformed JSON Web Encryption (JWE) token containing numerous period delimiters that forces the JWE.deserialize() function to allocate excessive memory, triggering a MemoryError . Ser...

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

PoC-Exploit-CVE-2024-20467

Exploit para vulnerabilidade no Cisco IOS XE CVE-2024-20467 Visão Geral Este exploit visa uma vulnerabilidade no código de remontagem de fragmentos IPv4 encontrado no Cisco IOS XE Software. A vulnerabilidade permite que um atacante remoto não autenticado cause uma condição de negação de serviço D...