300002 matches found
WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by dzeusking in WordPress Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email versions = 1.5.9...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
EUVD-2026-92433
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware . This flaw allows for a potential CRITICAL impact on confidentiality, integrity, and availability. While the CVSS score indicates a high attack complexity and a changed scope, specific technical d...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
TerraMaster TOS Info Disclosure (CVE-2022-24990)
Exploits CVE-2022-24990 in TerraMaster TOS 4.2.30: User-Agent TNAS on webNasIPS leaks firmware, network config, and admin password hash PWD. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS webNasIPS info disclosure CVE-2022-24990.""" import re from kittysploit import from...
Zeroshell kerbynet RCE (CVE-2019-12725)
Exploits CVE-2019-12725 in Zeroshell 3.9.0: newline injection in the User parameter of kerbynet StartSessionSubmit yields unauthenticated RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Zeroshell kerbynet command injection CVE-2019-12725.""" import re import urllib.parse from kittysploit import...
TBK DVR Auth Bypass (CVE-2018-9995)
Exploits CVE-2018-9995 in TBK/rebranded DVRs: Cookie uid=admin bypasses auth and /device.rsp?opt=user&cmd=list returns all user credentials in JSON. !/usr/bin/env python3 -- coding: utf-8 -- """TBK DVR cookie auth bypass credential leak CVE-2018-9995.""" import json from kittysploit import from...
Drupal Drupalgeddon2 RCE (CVE-2018-7600)
Exploits CVE-2018-7600 in Drupal 7/8 via form API render array injection on /user/register mailpostrender=passthru for unauthenticated RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Drupal Drupalgeddon2 RCE CVE-2018-7600.""" import re from kittysploit import from lib.protocols.http.httpclient...
BIT-MOODLE-2026-102587 Moodle: user list filters bypass profile field visibility
A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lists using profile attributes they are not permitted to view directly, resulting in unauthorized information disclosure...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: BPF: The unnecessary user-triggable WARNONCE message in the verifier log was removed. It is trivial for a user to trigger the “verifier log line truncated” warning. The verifier has a fixed-size buffer of 1024 bytes currently...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: core: The unnecessary framesz check in bpfxdpadjusttail has been removed. Syzkaller reported the following issue: ======================================= “Too big” – xdp-framesz = 131072 WARNING: CPU: 0, PID: 5020, at...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: vxlan: Do not arm the aging timer on a device that is down. The vxlanchangelink function arms the vxlan-agetimer whenever the requested aging interval differs from the configured one: c if conf.ageinterval !=...
Astra Linux – Vulnerability in open-vm-tools
VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper with local files to trigger insecure file operations within that VM...
Astra Linux – Vulnerability in Linux 5.10
Ubuntu Linux 6.8 contains SAUCE patches that include a potential NULL pointer dereferencing issue in the handling of AppArmor notifications. This bug can be triggered by an unprivileged local user, and it can lead to a kernel panic...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: dlmfs: Fixed error handling for userdlmdestroyLock. When userdlmdestroyLock fails, it does not clean up the flags it set before exiting. For the USERLOCKINTEARDOWN condition, if this function fails because the lock is...
Astra Linux – Vulnerability in Chromium
Insecure security interfaces in the Downloads section of Google Chrome on Android before version 92.0.4515.107 allowed a remote attacker to perform domain spoofing through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Qemu
The ethgetgsotype function in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process by sending packet data that lacks a valid Layer 3 protocol...