CVE-2019-1698

TRAN CONG DANH - SVTT - Mentor: LUU VAN LAN - CVE-2019-1698 - Giorno iniziato: 30/07/2024 Controlla il diff del codice tra la versione vulnerabile e la versione con fix: Riferimento codice 1: https://plugins.trac.wordpress.org/changeset/3040809/notificationx/trunk/includes/Core/Rest/Analytics.php...

cve-2022-46395-qemu

CVE-2022-46395 QEMU r36p0 Labor Dieses Repository enthält ein QEMU/no-Mali-Labor zur Reproduktion der portablen Auslösebedingung von CVE-2022-46395 für die Arm-Mali-r36p0-Treiberlinie. Das Labor ist für lokale Schwachstellenforschung und Regressionstests gedacht. Es enthält nicht die...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Security Misconfiguration ClickJacking ⚠️ Punteggio base: 6.5 MEDIO Scala: CVSS ⚠️ 📌 Descrizione Questo repository dimostra una falla di sicurezza del tipo Clickjacking presente nel sito del G1. La vulnerabilità consente a un attaccante di caricare il sito all'interno di un iframe...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Laboratorio di simulazione delle vulnerabilità RRAS di Windows 11 CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANTE – Solo uso didattico e difensivo Questa guida serve per creare un ambiente di laboratorio isolato e controllato per comprendere le vulnerabilità di integer overflow nello...

CVE-2019-18818_CVE-2019-19609

Exploit per CVE-2019-18818 e CVE-2019-19609 Questo repository contiene uno script Python per sfruttare due vulnerabilità: CVE-2019-18818 e CVE-2019-19609. CVE-2019-18818 Questa vulnerabilità consente a un attaccante di reimpostare la password di un utente amministratore nel CMS Strapi. Utilizzo 1...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Bypass critico dell'autenticazione remota in GNU Inetutils telnetd Il fantasma del 2015 è tornato per possedere tutto ciò che esegue ancora telnet. Zero autenticazione. Una variabile d'ambiente. Shell root immediata. ⚠️ Panoramica CVE-2026-24061 è una vulnerabilità...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-105180

A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object attributes. The attack can be executed...

CVE-2026-105180

A vulnerability exists in Jeebase version 0.0.1 within the UserService component, specifically affecting the updateUser function located at /user/update/info . An attacker can remotely execute a manipulation of the user/tempUser argument to cause dynamically-determined object attributes (CWE-915,...

CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks Lokales Labor Lokales Docker-Labor zur Analyse und Reproduktion von CVE-2026-7465 im WordPress-Plugin Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. Dieses Labor vergleicht: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 Der Nachweis ist absichtli...

CVE-2026-36226

CVE-2026-36226: Advantech WebAccess/SCADA Create New Project User XSS PoC Questa repository contiene una prova di concetto benigna per CVE-2026-36226, un problema di cross-site scripting in Advantech WebAccess/SCADA 8.0-2015.08.16. Questa repository è destinata esclusivamente a ricerca di sicurez...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-20586

A missing bounds check in vdec leads to a possible out-of-bounds write vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges, although user interaction is required for exploitation. Remediation is available via Patch ID: ALPS1138...

EUVD-2026-92208

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2026-105172 itsourcecode Online Admission System login1.php sql injection

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...