CVE-2011-2523

Vulnerabilidad de puerta trasera en Vsftpd 2.3.4 Vulnerability Cuando un atacante ingresa una cadena que agrega : al parámetro USER, se abre una puerta trasera en el puerto 6200...

CVE-2011-2523

Exploit de puerta trasera vsftpd 2.3.4 Servidor FTP: vsftpd Versión vulnerable: 2.3.4 CVE: CVE-2011-2523 Vulnerabilidad: se abre una puerta trasera en el puerto 6200 cuando el usuario introducía cadenas que añadían : al parámetro USER de FTP. Notas: La RCE no requiere autenticación...

CVE-2023-6275

CVE-2023-6275 - Cross-Site Scripting Reflejado en la Plataforma TOTVS Fluig 1.6.X - 1.8.1 La plataforma TOTVS Fluig, en sus versiones desde 1.6.1.X hasta 1.8.1, es vulnerable a Cross-Site Scripting en los parámetros 'redirectUrl' y 'user' dentro del módulo 'mobileredir'. Fluig es la plataforma de...

CVE-2025-0133-exploit

Escaneo de CVE-2025-0133 Un script escrito en Python para comprobar la existencia de una vulnerabilidad de Cross-Site Scripting reflejado CVE-2025-0133 que se presenta en Palo Alto. El archivo getconfig.esp se detecta y se prueba para XSS usando el script proporcionado. Uso: root@kitploit:...

CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image root@kitploit: docker build -t telnetd-bypass . Start the container root@kitploit: docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload root@kitploit: USER='-f root' telnet -a 127.0.0.1 23 Output...

CVE-2026-6182-SQLI-auth

SQL Injection Authentication Bypass - Simple Content Management System PHP Description A SQL Injection vulnerability exists in the admin login page of Simple Content Management System PHP. The user parameter is not sanitized before being passed to the SQL query, allowing an unauthenticated attack...

FLUIG-Vulnerabilidade-CVE-2023-6275

FLUIG-Vulnerabilidade-CVE-2023-6275 24 nov 2023 — Se encontró una vulnerabilidad en TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. Ha sido clasificada como problemática. https://nvd.nist.gov/vuln/detail/CVE-2023-6275 CVE-2023-6275 - Cross-Site Scripting reflejado en TOTVS Fluig Platform 1.6.X -...

CVE-2026-24061-setup

Configuración de CVE-2026-24061 Este repositorio contiene la configuración de Docker para CVE-2026-24061. Una vez que hayas instalado Docker, solo tienes que hacer lo siguiente: 1. Clona este repositorio. 2. Ejecuta el siguiente comando: root@kitploit: sudo docker build . --tag telnetd-auth-bypas...

CVE-2025-0133

CVE-2025-0133 XSS reflejado en el controlador getconfig.esp de la pasarela y el portal GlobalProtect de Palo Alto PAN-OS. El parámetro de consulta user se refleja sin codificar en la página de Captive Portal; un atacante que engaña a un usuario autenticado de GlobalProtect para que acceda a un...

CVE-2024-1512

CVE-2024-1512 Proof of Concept Vulnerability Overview CVE-2024-1512 exposes a critical vulnerability in the MasterStudy LMS WordPress Plugin, specifically within the implementation of the /lms/stm-lms/order/items REST route. The issue arises from the plugin's failure to properly escape the 'user'...

CVE-2026-85513

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

EUVD-2026-71087

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...

CVE-2026-43621 Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()

Simple Machines Forum SMF through 2.1.7, fixed in commit 6f0dc61, contains an authorization state-confusion vulnerability in the profile loader that allows authenticated low-privileged users to gain administrator access by supplying multiple values for the user parameter. Attackers can exploit th...

CVE-2026-43621

Simple Machines Forum (SMF) through 2.1.7 contains an authorization state-confusion vulnerability in the profile loader (Profile::load()). By supplying multiple values for the user parameter, an authenticated low-privileged user can exploit a mismatch between Profile::$member and User::$me-&gt;is...

CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

EUVD-2026-42506

The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 5.1.8. This is due to the updateuser function accepting a user ID parameter from form submissions without verifying that the authenticated user has permission to edit that specific...

CVE-2026-14655

A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argument User can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

PT-2026-53162

Name of the Vulnerable Software and Affected Versions JoomCCK affected versions not specified Description A front-end controller task in the JoomCCK extension for Joomla is susceptible to SQL injection. This occurs because the application constructs two SQL statements by directly concatenating a...