pwnage24mtk

pwnage24mtk Exploit de certificat pour les appareils MTK. Il existe une faille logique dans le processus de vérification des certificats MTK. Similaire à CVE-2023-20696. Peut être corrigé en juin. Avertissement Ce projet est uniquement utilisé pour la recherche. Assurez-vous d'obtenir une...

CVE-2020-25540

cve-2020-25540 Questo script viene utilizzato per lo sfruttamento della vulnerabilità di lettura arbitraria dei file nelle versioni v5 e v6 di ThinkAdmin ==L'endpoint API può variare tra le diverse versioni alcune basate su sviluppi secondari dell'ThinkAdmin originale== L'endpoint della versione...

CHAOS

CHAOS: أداة الإدارة عن بُعد CHAOS هي أداة إدارة عن بُعد مجانية ومفتوحة المصدر تسمح بإنشاء ملفات ثنائية للتحكم بأنظمة التشغيل البعيدة. الإبلاغ عن خطأ · طلب ميزة · بداية سريعة · لقطات الشاشة إخلاء مسؤولية يتم توفير هذا البرنامج "كما هو" دون أي ضمان من أي نوع. يمكنك استخدام هذا البرنامج على مسؤوليتك...

CVE-2025-50754-PoC

CVE-2025-50754 XSS Memorizzato a Esecuzione di Codice Remoto in una Piattaforma CMS Basata su PHP Riepilogo Una piattaforma CMS basata su PHP versione 5 contiene una vulnerabilità di Cross-Site Scripting XSS memorizzato nella funzionalità "Report". Quando un amministratore visualizza un report...

CVE-2026-7669-PoC

CVE-2026-7669 O SGLang silenciosamente substitui trustremotecode=False por True e re-invoca AutoTokenizer.frompretrained sempre que o transformers v5 retorna um objeto TokenizersBackend. Um modelo com um tokenizerclass personalizado e um automap apontando para tokenizer.py alcança execução...

DirtySlide

DirtySlide Unprivilegiert → Root: lokale Rechteausweitung LPE unter macOS. Ein 8-Byte-Out-of-Bounds-Lesen/Schreiben in Kernel-Speicher neben einer dyld-Shared-Cache-Seite, verursacht durch eine fehlende In-Page-Grenzprüfung im v5-Slide-Walk vmsharedregionslidepagev5, erreichbar über Syscall 536...

CVE-2026-80138

ClipBucket V5's web installer fails to properly validate or escape the phpclifilepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious phpclifilepath value to execute arbitrary commands as the web server...

CVE-2026-80138 ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

ClipBucket V5's web installer fails to properly validate or escape the phpclifilepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious phpclifilepath value to execute arbitrary commands as the web server...

CVE-2026-80138

ClipBucket V5 (versions 5.5.1 through 5.5.3-#153) is affected by an OS command injection in its web installer. The php_cli_filepath parameter is not properly validated or escaped before being passed to shell execution, allowing an unauthenticated attacker to submit a crafted POST request and exec...

CVE-2026-80138 ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

ClipBucket V5's web installer fails to properly validate or escape the phpclifilepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious phpclifilepath value to execute arbitrary commands as the web server...

flask-vuln-v5

Questo repository non contiene un README...

CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 Execução Remota de Código Referência: https://k4m1ll0.com/cve-2021-41653.html...

PT-2026-81894

Name of the Vulnerable Software and Affected Versions ClipBucket V5 affected versions not specified Description The web installer fails to properly validate or escape the php cli filepath parameter before passing it to shell execution. This allows unauthenticated attackers to submit a crafted POS...

EUVD-2026-62194

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the...

PT-2026-78230

Name of the Vulnerable Software and Affected Versions Tapo C200 version v5 Description An improper authentication issue exists within the login authentication verification module. An attacker on the local network can exploit weaknesses in the validation of the challenge parameter to bypass...

CVE-2026-12001 Hardcoded Credential Vulnerability in Multiple TP-Link Router Models

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...

USN-8581-1: libarchive vulnerabilities

It was discovered that libarchive did not properly manage memory when unpacking certain RAR5 archives, leading to a double free. An attacker could possibly use this issue to cause a denial of service. CVE-2026-14164 It was discovered that libarchive did not properly validate certain tar archives,...

Security Bulletin: Vulnerability in github.com/jackc/pgx/v5 bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Content-Aware Storage

Summary IBM Fusion, IBM Fusion HCI, IBM Fusion Content-Aware Storage include github.com/jackc/pgx/v5. It is vulnerable to memory-safety vulnerability. CVE-2026-33816 Vulnerability Details CVEID:CVE-2026-33816 DESCRIPTION: Memory-safety vulnerability in github.com/jackc/pgx/v5. CVSS Source: CISA A...

ClipBucket V5 操作系统命令注入漏洞

ClipBucket V5 is a video hosting platform developed by MacWarrior’s individual developers. Versions of ClipBucket V5 prior to 5.5.3 – including version 140 – contained an operating system command injection vulnerability. This vulnerability stemmed from the remote playback feature allowing direct...

CVE-2026-8913

A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5 due to improper neutralization of user-controlled input within the web management interface. An authenticated attacker with administrative privileges may be able to execute arbitrary commands when...