1089 matches found
rsync: rsync: Authorization bypass via `auth users` directive parsing
An authorization bypass flaw was found in the rsync daemon. The auth users directive parser incorrectly handles group names containing spaces due to comma-only tokenization. This flaw causes deny rules to be silently discarded, allowing an authenticated user to bypass restrictions and gain...
cve-2022-21877
POC CVE-2022-21877 This repository contains a POC for the CVE-2022-21877, found by Quang Linh, working at STAR Labs. This is an information leak found inside the spaceport.sys driver. An accompying blogpost can be found at this address. Using it To build the POC, simply run .\build. To run it, yo...
CVE-2026-53595_exploit
CVE-2026-53595 + CVE-2026-53593 — FreeScout Anonymous ATO → RCE Unauthenticated remote code execution in FreeScout ≤ 1.8.223 a Laravel help desk by chaining two flaws, both fixed in 1.8.224 : CVE-2026-53595 — anonymous account takeover. POST /user-setup/hash/invitesentat picks the account by its...
CVE-2025-6758
Real Spaces - WordPress Properties Directory Theme ≤ 3.6 Unauthenticated Privilege Escalation to Administrator via imicagentregister 📝 Description CVE-2025-6758 CVSS Score: 9.8 Critical The Real Spaces - WordPress Properties Directory Theme for WordPress is vulnerable to privilege escalation via...
spaces-finder
Spaces finder Spaces finder is a tool to quickly enumerate DigitalOcean Spaces to look for loot. It's similar to a subdomain bruteforcer but is made specifically for DigitalOcean Spaces and also has some extra features that allow you to grep for delicious files as well as download interesting fil...
CVE-2024-1874
CVE-2024-1874 Proof Of Concept for CVE-2024-1874 Command Injection via Array-ish $command Parameter of procopen bypass CVE-2024-1874 fix The CVE: In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailin...
CVE-2026-69575
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69568
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...
CVE-2026-69290
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-68877
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
CVE-2026-68844
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
CVE-2026-69575
Windows Storage Spaces Controller contains a use after free vulnerability that allows an authorized local attacker to elevate privileges , impacting confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). Attack complexity is high and low privileges are required, with ...
EUVD-2026-73707
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69568
CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...
EUVD-2026-73706
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...
EUVD-2026-73683
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-69290
CVE-2026-69290 is a stack-based buffer overflow in Windows Storage Spaces Controller that allows an authorized, locally authenticated attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact to confid...
EUVD-2026-73120
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
CVE-2026-68877
CVE-2026-68877 is a heap-based buffer overflow in Windows Storage Spaces Controller that allows an authorized local attacker (low privileges, no user interaction) to achieve code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ). CISA's SSVC assessme...