147561 matches found
CVE-2025-9074-docker-escape
CVE-2025-9074-Docker Escape HTB MonitorsFour ┘З╪░╪з ╪з┘Д┘Г┘И╪п ┘Д╪г╪║╪▒╪з╪╢ ╪к╪╣┘Д┘К┘Е┘К╪й ┘Б┘В╪╖ ┘И╪и┘К╪ж╪з╪к ╪о╪з╪╢╪╣╪й ┘Д┘Д╪▒┘В╪з╪и╪й ┘Е╪л┘Д ╪з┘Д┘Е╪о╪к╪и╪▒╪з╪к Hack The Box. ┘Д╪з ╪к╪│╪к╪о╪п┘Е┘З ┘Б┘К ╪г┘Ж╪╕┘Е╪й ╪п┘И┘Ж ╪е╪░┘Ж. ┘К╪н╪к┘И┘К ┘З╪░╪з ╪з┘Д┘Е╪│╪к┘И╪п╪╣ ╪╣┘Д┘Й ╪│┘Г╪▒╪и╪к ╪з╪│╪к╪║┘Д╪з┘Д ┘Д╪л╪║╪▒╪й Docker Remote API ╪з┘Д┘Е┘Г╪┤┘И┘Б╪й ╪и╪п┘И┘Ж ┘Е╪╡╪з╪п┘В╪й ┘И╪з┘Д╪к┘К ╪к╪│┘Е╪н ╪и╪з┘Д┘З╪▒┘И╪и ┘Е┘Ж ╪з┘Д╪н╪з┘И┘К╪й ╪е┘Д┘Й ╪з┘Д┘Е╪╢┘К┘Б ╪╣┘Ж ╪╖╪▒┘К┘В ╪е┘Ж╪┤╪з╪б ╪н╪з┘И┘К╪з╪к...
HTB-Pterodactyl-Writeup
HackTheBox тАФ Pterodactyl Writeup Difficulty: Medium | OS: Linux openSUSE Leap 15.6 | Season: 10 Summary Pterodactyl is a medium-difficulty Linux machine running the Pterodactyl game server panel. The attack chain involves an unauthenticated LFI-to-RCE vulnerability in the panel, credential...
CVE-2025-69428
Security Advisory - CVE-2025-69428 Title: Unauthenticated Access to Sensitive Directory Information Disclosure CVE-ID: CVE-2025-69428 Description A critical access control vulnerability in locally deployed Pro-Bit application in versions less than v1.77.4 allows unauthenticated attackers to...
CVE-2025-69821-Beat-XP-Vega-Smartwatch-Security-Assessment
CVE-2025-69821 : Beat-XP-Vega-Smartwatch-Security-Assessment A security assessment of the Beat XP VEGA Smartwatch Firmware RB303ATV006229 focused on Bluetooth Low Energy BLE connectivity revealed a design and implementation weakness that enables a nearby BLE central device to establish and retain...
CVE-2026-23491
CVE-2026-23491: InvoicePlane has Unauthenticated Path Traversal in Guest Controller Overview...
CVE-2026-31402
ЁЯЫбя╕П CVE-2026-31402 тАУ NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years ЁЯУМ Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...
CVE-2026-30655
CVE-2026-30655 тАФ SQL Injection in esiclivre password reset Summary A SQL injection vulnerability exists in the password reset endpoint of esiclivre. An unauthenticated attacker can inject SQL via the cpfcnpj POST parameter, potentially resulting in unauthorized access to sensitive information...
CVE-2026-9055
CVE-2026-9055 тАФ Amelia Booking Plugin Unauthenticated Privilege Escalation Research writeup by Sentinel AI Defense. Defensive analysis only тАФ no working exploit or PoC is published here for this vulnerability. An unauthenticated privilege escalation vulnerability in the Amelia Premium WordPress...
CVE-2026-3055
ЁЯФе NetScalerBleed2: Critical Unauth Memory Overread in Citrix NetScaler CVE-2026-3055 Unauthenticated Out-of-Bounds Memory Read Memory Leak Only on appliances configured as SAML Identity Provider IdP ЁЯУЛ Overview CVE-2026-3055 is a critical out-of-bounds read vulnerability CWE-125 in Citrix NetScale...
CVE-2026-1657
CVE-2026-1657: ╪л╪║╪▒╪й ╪▒┘Б╪╣ ┘Е┘Д┘Б╪з╪к ╪╣╪┤┘И╪з╪ж┘К╪й ╪║┘К╪▒ ┘Е┘И╪л┘В╪й ┘Б┘К ╪е╪╢╪з┘Б╪й EventPrime ╪е╪о┘Д╪з╪б ┘Е╪│╪д┘И┘Д┘К╪й: ╪к┘Е ╪е┘Ж╪┤╪з╪б ┘З╪░╪з ╪з┘Д┘Е╪│╪к┘И╪п╪╣ ┘Д╪г╪║╪▒╪з╪╢ ╪к╪╣┘Д┘К┘Е┘К╪й ┘И╪з┘Д╪е┘Б╪╡╪з╪н ╪з┘Д╪г╪о┘Д╪з┘В┘К ┘Б┘В╪╖. ╪к┘Е ╪з┘Д╪е╪и┘Д╪з╪║ ╪╣┘Ж ╪з┘Д╪л╪║╪▒╪й ╪и╪┤┘Г┘Д ┘Е╪│╪д┘И┘Д ╪е┘Д┘Й ╪з┘Д╪и╪з╪ж╪╣ ┘И╪к┘Е ╪к╪╡╪н┘К╪н┘З╪з. ┘Д╪з ╪к╪│╪к╪о╪п┘Е ┘З╪░┘З ╪з┘Д┘Е╪╣┘Д┘И┘Е╪з╪к ┘Д╪з╪│╪к╪║┘Д╪з┘Д ╪з┘Д╪г┘Ж╪╕┘Е╪й ╪п┘И┘Ж ╪е╪░┘Ж ┘Е┘Ж╪з╪│╪и. ┘Е┘Д╪о╪╡ ╪к┘Е ╪з┘Г╪к╪┤╪з┘Б ╪л╪║╪▒╪й ╪▒┘Б╪╣ ┘Е┘Д┘Б╪з╪к ╪╣╪┤┘И╪з╪ж┘К╪й ╪║┘К╪▒...
CVE-2024-51793
Wordpress Computer Repair Shop = 3.8115 - Unauthenticated Arbitrary File Upload CVE-2024-51793 The CRM WordPress Plugin тАУ RepairBuddy plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.8115. This makes it possib...
CVE-2026-1492
CVE-2026-1492 User Registration & Membership = 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration ЁЯФ┤ Vulnerability Overview CVE-2026-1492 тАФ Unauthenticated Privilege Escalation via Membership Registration Description: The User Registration & Membership plugin for WordPress is...
react2shell-scanner
react2shell-scanner A high-fidelity command-line vulnerability scanner for detecting CVE-2025-55182 and CVE-2025-66478 Remote Code Execution in Next.js applications using React Server Components RSC. ЁЯЪи Vulnerability Overview These critical vulnerabilities affect Next.js applications using React...
CVE-2026-24061
GNU InetUtils telnetd Authentication Bypass via Argument Injection - CVE-2026-24061 ЁЯУЪ Introduction A recently identified argument injection vulnerability in GNU InetUtils telnetd allows attackers to circumvent authentication by setting the USER environment variable to the value тАЬ-f rootтАЭ. As a...
CVE-2021-24499
CVE-2021-24499 | Workreap - рдлреНрд░реАрд▓рд╛рдВрд╕ рдорд╛рд░реНрдХреЗрдЯрдкреНрд▓реЗрд╕ рдФрд░ рдбрд╛рдпрд░реЗрдХреНрдЯрд░реА WordPress рдереАрдо 2.2.2 - рдордирдорд╛рдирд╛ рдлрд╝рд╛рдЗрд▓ рдЕрдкрд▓реЛрдб WordPress рдереАрдо Workreap 2.2.2 - рдмрд┐рдирд╛ рдкреНрд░рдорд╛рдгреАрдХрд░рдг рдХреЗ рдлрд╝рд╛рдЗрд▓ рдЕрдкрд▓реЛрдб рдЬреЛ рд░рд┐рдореЛрдЯ рдХреЛрдб рдирд┐рд╖реНрдкрд╛рджрди рдХреА рдУрд░ рд▓реЗ рдЬрд╛рддрд╛ рд╣реИ CVE-2021-24499 рдХрдордЬреЛрд░реА рдХреЗ рд▓рд┐рдП WordPress Workreap рдереАрдо рдореЗрдВ рдПрдХ рд╢рдХреНрддрд┐рд╢рд╛рд▓реА рдФрд░ рд╕рдЯреАрдХ рдмрдбрд╝реЗ рдкреИрдорд╛рдиреЗ рдкрд░...
confluence-ognl-rce
CVE-2022-26134 - Atlassian Confluence OGNL RCE This script is a wrapper over an unauthenticated remote code execution via OGNL injection exploit primitive in Confluence Data Center and Server CVE-2022-26314. Vendor advisory Originally inspired by the PoC jbaines-r7/throughthewire. I added the...
CVE-2025-34037
CVE-2025-34037 Python port of the Linksys tmUnblock.cgi RCE exploit For educational use only. Run against your own devices. Vulnerability The tmUnblock.cgi endpoint on several Linksys router models accept POST requests without validating the Authorization header. the ttcpip parameter is passed...
CVE-2025-10147
CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - Unauthenticated Arbitrary File Upload The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6...
CVE-2025-471812-POC
root@kitploit: / | / | / / | / / / |/ // / / / / / / | | / /| |/ / / / / /|/ / / / / // // /| |/ / | / // / / / // / /// |/ |/ // /// CVE-2025-47812 тАФ Wing FTP Server = 7.4.3 Unauthenticated RCE Proof-of-concept exploit for CVE-2025-47812 , an unauthenticated remote code execution vulnerability...
CVE-2025-32433-available-for-windows
CVE-2025-32433 Information about the vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC root@kitploit: kdev :: /erlang/CVE-2025-32433 тА╣mainтА║ ┬╗ python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server...