PT-2026-83541

A vulnerability was determined in TOTOLINK A720R 4.1.5cu.630 B20250509. This impacts the function setMacFilterRules of the file cstecgi.cgi of the component MAC Filtering. Executing a manipulation of the argument desc can lead to memory corruption. The attack may be launched remotely. The exploit...

PT-2026-83637

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A weakness in the SMF component allows a remote attacker to cause a reachable assertion by manipulating the preemptCap argument within the smf nudm sdm handle get function located in the...

PT-2026-83562

A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function reset user password of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. This...

PT-2026-83522

A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE SB GetUserDataLength of the file src/cFS/cfe/modules/sb/fsw/src/cfe sb util.c of the component cFE Software Bus. Performing a manipulation of the argument TotalMsgSize/HdrSize results in integer...

PT-2026-83529

A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component edit profile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be...

PT-2026-83551

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

PT-2026-83632

A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf namf comm decode ue mm context list of the file src/amf/namf-handler.c of the component AMF. This manipulation of the argument ueContext.mmContextList.allowedNssai causes memory corruption. The atta...

PT-2026-83639

A vulnerability has been found in LogNet grpc-spring-boot-starter up to 5.2.0. Affected is an unknown function of the component Annotation Processing. Such manipulation leads to improper authorization. The attack may be performed from remote. A high complexity level is associated with this attack...

PT-2026-83587

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The...

PT-2026-83623

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/is migrate allowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be...

PT-2026-83568

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amf fsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit ha...

PT-2026-83636

Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.8.0 Description A flaw in the N1-N2 Message Handler component allows a remote attacker to cause a denial of service. This occurs through the manipulation of the ngapIeType variable within the...

PT-2026-83622

A vulnerability has been found in TOTOLINK N600R 4.3.0cu.7866 B20220506. This vulnerability affects the function loginAuth of the file /web cste/cgi-bin/cstecgi.cgi of the component Authentication Handler. Such manipulation leads to insufficiently random values. It is possible to launch the attac...

CVE-2026-82423

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

Exploit for CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be...

CVE-2026-82423

A behavioral workflow enforcement vulnerability exists in the macrozheng mall project (up to version 1.0.3 ). The issue affects the Payment Status Endpoint at the file /order/paySuccess, where manipulation of the orderId argument allows a remote, low-privilege attacker to enforce a behavioral wor...

citrix-logchecker

citrix-logchecker Analizza i log di Citrix Netscaler per rilevare segni di sfruttamento di CVE-2023-4966 Scritto da Otmar Lendl. Utilizzo: root@kitploit: ./citrix-anomaly.pl -d -v -h -p file -a X filedilog Questo script analizza i file syslog di Citrix Netscaler e cerca riconnessioni di sessione...

CVE-2020-17519

CVE-2020-17519 Strumento di Traversal dei Log Uno strumento Python che utilizza una tecnica di directory traversal per richiedere file di log da un URL di destinazione. Mostra l'avanzamento in tempo reale, supporta la configurazione del proxy e, opzionalmente, salva le risposte valide...