395 matches found
CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport
CVE-2025-55972-Remote-Unauthenticated-Denial-of-Service-DoS-in-TCL-Smart-TV-UPnP-DLNA-AVTransport Un téléviseur intelligent TCL exécutant une implémentation UPnP/DLNA MediaRenderer vulnérable est affecté par un déni de service DoS distant et non authentifié. Fournisseur : TCL Technology Group...
CVE-2024-28752
Apache CXF CVE-2024-28752 Ambiente de reprodução Aviso de vulnerabilidade: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt Inicialização do ambiente samples/javafirstjaxwsfactorybean IDEA Inicie o serviço webservice via ServerStarter.java Construção Usando JDK8 root@kitploit: m...
CNVD-C-2019-48814-CNNVD-201904-961
CNVD-C-2019-48814 e CNNVD-201904-961 Grazie a t00ls-ximcx0101 per aver fornito lo script CNVD-C-2019-48814 POC Summary Link pertinenti: Il Jianshu di 清水川崎大佬: https://www.jianshu.com/p/c4982a845f55 Repost di 安全祖师爷: https://dwz.cn/2GQvbUae A causa di alcuni fattori ambientali, i percorsi possono...
Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725
CVE-2019-2725 – Esecuzione remota di codice non autenticata in Oracle WebLogic Vulnerabilità nel componente Oracle WebLogic Server di Oracle Fusion Middleware sottocomponente: Web Services. Le versioni supportate interessate sono 10.3.6.0.0 e 12.1.3.0.0. Una vulnerabilità facilmente sfruttabile...
SAP Solution Manager 7.2 - Remote Command Execution
SAP Solution Manager SolMan running version 7.2 has a remote command execution vulnerability within the SAP EEM servlet tcsmdagentapplicationeem. The vulnerability occurs due to missing authentication checks when submitting SOAP requests to the /EemAdminService/EemAdmin page to get information...
POC-CVE-2026-56164-exploit
CVE-2026-56164 — Exploit di bypass dell'autenticazione di Microsoft SharePoint Server Critico CVSS 9.8 — Escalation di privilegi non autenticata ad Amministratore Farm in Microsoft SharePoint Server Indice Panoramica Dettagli della vulnerabilità Versioni interessate Diagrammi di architettura...
EUVD-2026-58070
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
PT-2026-71677
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions prior to 10.1.17 Description An authorization bypass occurs due to improper validation in the delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to the...
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...
Exploit for Missing Authentication for Critical Function in Microsoft
CVE-2026-56164 — Microsoft SharePoint Server Authentication By...
CVE-2026-20263
A vulnerability in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling when parsing a specific BEEP SOAP...
CVE-2026-20263
Technical details (affected product/version, root cause, exploit specifics) are not publicly provided in the supplied documents. Monitor for official advisories and updates.
PT-2026-45996
Mercusys AC12G EU V1 router with firmware AC12GEU V1 200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP 192.168.1.1 or localhost 127.0.0.1 as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the...
CVE-2026-36608
Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP 192.168.1.1 or localhost 127.0.0.1 as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the intern...
php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability
A flaw was found in PHP's SOAP extension. This vulnerability allows a remote attacker to execute arbitrary code on the affected system. The issue stems from a use-after-free error in the object deduplication mechanism, which can be triggered by sending a specially crafted SOAP request. This allow...
php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability
A flaw was found in PHP's SOAP extension. This vulnerability allows a remote attacker to execute arbitrary code on the affected system. The issue stems from a use-after-free error in the object deduplication mechanism, which can be triggered by sending a specially crafted SOAP request. This allow...
php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability
A flaw was found in PHP's SOAP extension. This vulnerability allows a remote attacker to execute arbitrary code on the affected system. The issue stems from a use-after-free error in the object deduplication mechanism, which can be triggered by sending a specially crafted SOAP request. This allow...