CVE-2026-55215

MariaDB Connector/Node.js is vulnerable to cleartext password disclosure via a man-in-the-middle attack when ssl: true is set without a pinned CA or server certificate. The root cause lies in the TLS handshake logic: in handshake.js, a server selecting mysql_clear_password as the initial authenti...

CVE-2024-50482

CVE-2024-50482 WooCommerce Product Design = 1.0.0 - Nicht authentifizierter beliebiger Dateiupload Beschreibung: Das WooCommerce Product Design Plugin für WordPress ist anfällig für beliebige Dateiuploads aufgrund fehlender Dateityp-Validierung in allen Versionen bis einschließlich 1.0.0. Dies...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - RCE autenticado no Chyrp Lite ≤ 2026.01 "Iriomote" Ataque encadeado: bypass da blocklist de uploadspath CVE-2026-53768 + ausência de validação de extensão de arquivo em adminupdateupload CVE-2026-53767 → Execução Remota de Código como www-data...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 – Nicht authentifizierter beliebiger Datei-Upload Beschreibung Das AR for WooCommerce-Plugin für WordPress ist in allen Versionen bis einschließlich 6.2 aufgrund fehlender Dateityp-Validierung anfällig für beliebige Datei-Uploads. Dadurch können nicht...

langflow-cors-scanner

CVE-2025-34291 — Langflow Origin Validation / CORS Panoramica Una configurazione CORS eccessivamente permissiva abbinata alla configurazione del cookie di refresh token consente il furto di credenziali...

vm-homelab-log4shell-assessment

Valutazione delle vulnerabilità e convalida dello sfruttamento — Apache Solr / Log4Shell Laboratorio di gestione delle vulnerabilità a ciclo completo: scansione → prioritizzazione → convalida manuale → rilevamento a livello di rete → remediation → verifica. Target: container Solr 8.11.0 di Vulhub...

ResetNightmare

ResetNightmare Strumento proof-of-concept POC per ResetNightmare CVE-2026-27912. ResetNightmare è una falla di validazione nel protocollo Kerberos Change Password che consente di reimpostare la password di qualsiasi account utente/computer, senza conoscerne quella attuale. L'attacco richiede un...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Confusão de Tamanho de Dados de Retorno em Assembly Solidity Código do Programa Solidity root@kitploit: // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret =...

EUVD-2026-67853

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – Dirottamento del frammento nel flusso implicito OAuth2 Codice del programma Node.js + Exploit root@kitploit: // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri =...

GHSA-X8MJ-6P3Q-G5PP free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

free5GC NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

Summary free5GC NRF Docker image free5gc-fuzz:latest accepts NF registration requests without validating any field constraints against 3GPP TS 29.510, allowing unauthenticated attackers to inject fake NF profiles with arbitrary service endpoint IP addresses. All 17 constraint violations tested UU...

CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

CVE-2026-55068

free5GC (open-source 5G core network) version 4.2.2 and earlier is vulnerable to NF Registration Poisoning in the NRF component. The RegisterNFInstance handler (PUT /nnrf-nfm/v1/nf-instances/{nfInstanceID}) accepts NF profile bodies without enforcing 3GPP TS 29.510 constraints for UUID format, nf...

CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

MemorizingTrustManager

MemorizingTrustManager - Supporto cloud privato per la tua app MemorizingTrustManager MTM è un progetto per abilitare un uso più intelligente e sicuro di SSL su Android. Se incontra un certificato SSL sconosciuto, chiede all'utente se accettare il certificato una volta, permanentemente, o se...

CVE-2024-9047

POC - Plugin WordPress File Upload, nel file wfufiledownloader.php prima della versione = 4.24.11 - CVE-2024-9047 Panoramica Il plugin WordPress File Upload è vulnerabile a causa di una convalida degli input impropria nel file wfufiledownloader.php, che interessa le versioni = 4.24.11. Questa...

CVE-2024-56064

CVE-2024-56064 WP SuperBackup = 2.3.3 - Caricamento Arbitrario di File Non Autenticato Descrizione Il plugin Super Backup & Clone - Migrate for WordPress per WordPress è vulnerabile al caricamento arbitrario di file a causa della mancata validazione del tipo di file in tutte le versioni fino alla...

GHSA-2WVM-8MVP-22QV Pocket-ID has an Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

Summary The OIDC authorization page in the pocket-id frontend redirects the browser to an attacker-controlled URL without consulting the backend redirecturi allow-list when the request uses prompt=none. An attacker who knows a valid clientid can craft an /authorize link that sends a victim or a...

CVE-2026-82343

A flaw in GIMP's file-psd plugin fails to properly validate the channel-count parameter when processing a specially crafted PSD file, resulting in a heap out-of-bounds read and a stack out-of-bounds access . The impact is an application crash leading to denial of service or limited information di...