290087 matches found
CVE-2026-76488 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...
CVE-2026-76488 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...
EUVD-2026-94469
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...
CVE-2026-80885
A flaw was found in the Linux kernel's Andrew File System AFS component. The rxrpc Out-of-Band OOB message handler did not properly cancel its processing. This could lead to the handler continuing to process messages even when the network namespace is no longer active, or mishandling security...
CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...
CVE-2025-70899
Este repositorio contiene la Prueba de Concepto que demuestra la vulnerabilidad de protección CSRF faltante en el Sistema de Registro de Cursos en Línea de PHPgurukul. 📄 Vea el PoC completo aquí: MissingCSRFprotectionpoc.md...
Snow Crash
Snow Crash Este proyecto es una introducción a la seguridad informática. Snow Crash te ayudará a descubrir la seguridad en varios subdominios, con un enfoque orientado al desarrollador. Te familiarizarás con varios lenguajes ASM, Perl, Php, etc., desarrollarás cierta lógica para entender programa...
CVE-1999-0524-POC
ICMP Timestamp Scanner — CVE-1999-0524 ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██║ ╚════██║ ║ ║...
CVE-2024-31317-Deployer
CVE-2024-31317 Deployer 🔒 安全研究声明 本项目仅用于安全研究和教育目的。使用本工具进行未经授权的测试是非法的。作者不对任何滥用或损害负责。 📋 概述 CVE-2024-31317 是一个影响 Android 9 至 Android 13 设备的严重安全漏洞，允许具有 WRITESECURESETTINGS 权限的应用程序通过命令注入获得系统级权限执行。 本项目提供了该漏洞的详细技术分析、概念验证代码以及自动化部署工具。 ✨ 主要特性 📱 支持 Android 9-13 全版本 🛠️ 自动化部署脚本 🔄 反向 Shell 连接 📊 详细的技术文档 🎯 模块化设计 🐛...
CVE-2026-92533
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-36214
CVE-2026-36214 - osTicket 中通过易受攻击的 Bootstrap Tooltip 组件导致的存储型跨站脚本（XSS） 描述 Enhancesoft osTicket 版本从 1.10 到 1.17.7 以及从 1.18.0 到 1.18.3 均包含已知存在漏洞的 Bootstrap Tooltip 3.3.4 组件（CVE-2019-8331），这引入了存储型跨站脚本（XSS）漏洞。 在 osTicket 的默认配置中，工单提交者（“用户”）无需事先认证即可提交工单，且用户自助注册默认开启。远程用户可以构造恶意工单消息，尽管该消息通过了 htmlLawed HTM...
CVE-2026-92533 Path Traversal in BugTracker.NET
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-92533
A path traversal vulnerability exists in the BugTracker.NET file download component. The flaw stems from improper validation of user-supplied paths in the parameter used to specify file names. An authenticated remote attacker could provide a manipulated path to access files outside the intended d...
EUVD-2026-94285
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-92533 Path Traversal in BugTracker.NET
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successfu...
CVE-2026-54161
CVE-2026-54161 PoC Resumen upsmon interpola el valor proporcionado por el servidor, controlable por el atacante,ups.alarm, sin sanitizar, en un comando de shell que ejecuta mediante system. Cuando un dispositivo monitoreado reporta un estado ALARM y el operador ha configurado NOTIFYCMD con EXEC e...
pulse-meter
Pulse Meter Esto es un trabajo en curso para analizar el System Snapshot de un dispositivo Ivanti Connect Secure con el fin de identificar posibles IOCs relacionados con CVE-2023-46805, CVE-2024-21887 y CVE-2025-0282. Advertencia : Es posible que haya falsos positivos, por lo que es mejor comprob...
CVE-2026-107104
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successf...
CVE-2026-107102
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an...