165 matches found
Cisco-IOS-XE-CVE-2023-20198
Cisco-IOS-XE-CVE-2023-20198 Exploit PoC para CVE-2023-20198 Información de vulnerabilidad y uso del exploit proporcionados por smokeinthellos Ver referencias La gestión del endpoint, tipo de contenido http y encabezados ha sido modificada a partir de otros PoCs existentes para funcionar en...
CVE-2022-45047
CVE-2022-45047 POC,EXP,chatGPT for me code root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding":...
CVE-2025-49493
Exploit XXE de Akamai CloudTest CVE-2025-49493 Resumen Este es un exploit basado en Python para CVE-2025-49493 , que afecta a las versiones de Akamai CloudTest anteriores a 60 2025.06.02 12988. La vulnerabilidad permite la inyección de Entidad Externa XML XXE a través del endpoint del servicio...
EUVD-2026-61618
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Report...
CVE-2026-9152
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
CVE-2026-9152
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of identity verification. An unauthenticated network attacker who can reference a target workspace's...
CVE-2026-9152
The CVE-2026-9152 entry concerns Altium 365 SearchService with an unauthenticated legacy SOAP endpoint that exposes search index operations. The root cause is lack of authentication/identity verification, enabling an unauthenticated attacker who knows a workspace identifier to access and manipula...
CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...
CVE-2026-39907 Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2...
CVE-2026-39907
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP 1208. The ReadLicense action’s LFName accepts unsanitized file paths, enabling crafted SOAP requests with UNC paths to trigger outbound SMB connections and leak NTLMv2 machi...
EUVD-2021-18884
Malware in sbrugna...
EUVD-2017-6753
Malware in sbrugna...
EUVD-2023-45706
Malicious code in bioql PyPI...
EUVD-2023-48743
Malicious code in bioql PyPI...
EUVD-2023-48746
Malicious code in bioql PyPI...
EUVD-2023-45720
Malicious code in bioql PyPI...
EUVD-2023-45717
Malicious code in bioql PyPI...
EUVD-2023-45708
Malicious code in bioql PyPI...