79471 matches found
CVE-2026-73312 XenForo < 2.3.13 Refresh Token Replay via Expired Access Token
XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access token has expired. Attackers can repeatedly submit the same refresh token to generate...
CVE-2026-73312 XenForo < 2.3.13 Refresh Token Replay via Expired Access Token
XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access token has expired. Attackers can repeatedly submit the same refresh token to generate...
CVE-2026-73312
XenForo versions before 2.3.13 contain a refresh token replay vulnerability in the authentication token mechanism. The root cause is the failure to mark refresh tokens as consumed when the parent access token has expired, allowing an attacker to repeatedly submit the same refresh token to generat...
WordPress Thank You Page Customizer for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tony Harris in WordPress Plugin Thank You Page Customizer for WooCommerce versions = 1.2.2...
CVE-2012-1803
CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...
Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download
Agent-Zero v0.8.0 - 0.9.4 contains a path traversal caused by improper validation in /api/downloadworkdirfile.py, letting attackers access unauthorized files, exploit requires crafted request. id: CVE-2025-55523 info: name: Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download author: 0xAkoko...
vmware_vcenter_cve_2020_3952
Prueba de concepto para CVE-2020-3952 Este es un breve fragmento de código que explota CVE-2020-3952, el cual se describe en detalle en la publicación de Guardicore Labs aquí. Esta vulnerabilidad fue publicada por VMware en abril de 2020 con una puntuación CVSS máxima de 10.0. Permite a un atacan...
CVE-2026-79576
An issue in the Single-Sign On SSO component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password...
PT-2026-87822
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
PT-2026-88503
Impact The endpoint /rest/active-workflows returned every active workflow ID on the instance to any member, regardless of sharing, and workflow activation, deactivation and publication push events were broadcast to every connected client, carrying workflow IDs, version IDs and activation-error...
PT-2026-87890
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-87641
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2018-9995-rs
Overview This repository contains a proof-of-concept PoC exploit implemented in Rust targeting CVE-2018-9995. The code is for research and educational purposes only. CVE Details Identifier: CVE-2018-9995 Summary: Proof-of-concept exploit demonstrating the vulnerability see public advisories for...
Flink_RCE
Apache Flink Web Dashboard Unauthorized Access, Uploading Malicious jar Leads to Remote Code Command Execution msf nc python usage: python 02-Flink.py http://10.10.20.100:8081 nc.jar...
CVE-2026-80125
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-79639
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-79639
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
CVE-2026-79639
Dell Secure Connect Gateway (SCG) 5.0 is affected by an Improper Certificate Validation vulnerability in both the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). An unauthenticated attacker with adjacent network access could exploit this flaw to gain una...
EUVD-2026-72523
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...