CVE-2026-24061-GNU-inetutils-Telnet-Detector

كاشف CVE-2026-24061 لـ GNU inetutils Telnet أداة آمنة للكشف السلبي لتحديد التعرض المحتمل لثغرة CVE-2026-24061 ، وهي ثغرة تؤثر على إصدارات معينة من GNU inetutils telnet. صُمم هذا المشروع لـ خطوط أنابيب DevOps ، وعمليات تدقيق البنية التحتية ، ومحافظ الأمن الدفاعي. ما هي CVE-2026-24061؟ CVE-2026-240...

CVE-2023-22515-joaoviictorti

CVE-2023-22515 Panoramica Compilazione Utilizzo Esecuzione di CVE-2023-22515 Panoramica Confluence è un wiki aziendale basato sul web sviluppato dalla società australiana di software Atlassian. Atlassian è stata informata di un problema segnalato da alcuni clienti in cui attaccanti esterni...

CVE-2025-26263

CVE-2025-26263 CVE-2025-26263 – Die Windows-Desktop-Anwendung GeoVision ASManager mit der Version 6.1.2.0 oder niedriger ist anfällig für die Offenlegung von Anmeldeinformationen aufgrund unsachgemäßer Speicherverwaltung im Prozess ASManagerService.exe. Anforderungen Für einen erfolgreichen Angri...

CVE-2025-63579

CVE-2025-63579 وصول غير مصرح به إلى جميع أسماء المستخدمين وكلمات المرور المُدخلة في ميزة دفتر العناوين الموجودة في طابعات Kyocera Command Center RX. الوصف الاستخدام غير المصرح به لطابعات Kyocera، يسمح بتصدير جميع المعلومات المخزنة في دفتر عناوين Kyocera. يمكن تجاوز الإجراء الأمني الذي يشفر البيان...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2024-41713-Scan

Scanner CVE-2024-41713 Questo repository contiene uno script Python per rilevare la presenza della vulnerabilità CVE-2024-41713 in Apache HTTP Server. CVE-2024-41713 è una vulnerabilità di directory traversal che consente ad attaccanti non autorizzati di accedere a risorse limitate su server...

CVE-2023-1177-MLFlow

CVE-2023-1177 MLFlow Path Traversal Informazioni su MLflow MLflow è una piattaforma open-source per la gestione dell'intero ciclo di vita del machine learning. Funzioni principali: MLflow gestisce quattro funzioni principali: Tracciamento degli esperimenti per registrare e confrontare parametri e...

CVE-2026-26418

CVE-2026-26418 Autenticazione e Autorizzazione Mancanti nella Web API Riepilogo della Vulnerabilità È stata identificata una vulnerabilità di autenticazione e autorizzazione mancanti nel livello Web API di Tata Consultancy Services TCS – Cognix Recon Client v3.0. Alcuni endpoint API esposti non...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

Strumento di Exploit per CVE-2026-1529 Keycloak Keycloak: registrazione non autorizzata di organizzazioni tramite validazione impropria del token di invito Disclaimer Questo strumento è destinato esclusivamente a scopi educativi e di test di sicurezza. Utilizzalo solo su sistemi per cui hai...

CVE-2024-56512-Apache-NiFi-Exploit

NiFiExploit Uno strumento per sfruttare la vulnerabilità CVE-2024-56512 in Apache NiFi , che consente l'accesso non autorizzato a dati sensibili tramite API non adeguatamente protette...

DBScanner

DBScanner Detecção em lote de acesso não autorizado + senhas fracas Script de varredura automática de bancos de dados SQL e No-SQL comuns em redes internas mysql, mssql, oracle, postgresql, redis, mongodb, memcached, elasticsearch, incluindo detecção de acesso não autorizado e senhas fracas comun...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

Blackash-CVE-2025-61884

CVE-2025-61884 Nuovo bug di Oracle E-Business Suite potrebbe consentire agli hacker di accedere ai dati senza login 💀 CVE-2025-61884 — Riepilogo completo 🧾💥...

CVE-2024-56433

CVE-2024-56433 shadow-utils – Unsichere Standardzuweisung von Subordinations-IDs für lokale Benutzer Zusammenfassung Die standardmäßige Zuweisung von Subordinations-IDs birgt das Risiko einer Kollision mit vorhandenen Benutzer-IDs, was potenziell eine willkürliche Änderung von UID/GID und...

CVE-2021-45232

Apache APISIX Dashboard Schnittstelle ohne Autorisierung Beschreibung Dieses Tool integriert fofa- und POC-Ein-Klick-Erkennungsfunktionen und realisiert das Ein-Klick-Crawlen von fofa sowie die Ein-Klick-Erkennung gleichzeitiges Crawlen und Testen Verwendungsmethode Verwendete Version: python3 Vo...

CVE-2023-49339

Relatório de Vulnerabilidade de Segurança CVE-2023-49339: Sistema Banner da Ellucian Introdução Este documento descreve uma vulnerabilidade de segurança crítica encontrada no Sistema Banner da Ellucian, particularmente na versão 9.17 e versões anteriores. A vulnerabilidade foi identificada em...

PT-2026-82789

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

PT-2026-82736

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...