CVE-2022-22954

CVE-2022-22954 Attention Please use this at your own risk. This repo is meant only for educational purposes and we are strictly against all illegal intentions and we would not be responsible of any illegal activities associated with this repo. Be ethical! Example python3 CVE-2022-22954.py -t...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...

PoC--CVE-2019-10149_Exim

PoC-CVE-2019-10149Exim MNEMO-CERT has developed a PoC that allows executing commands with elevated privileges by exploiting the vulnerability CVE-2019-10149, which affects different versions of Exim 4.87 - 4.91. To perform local exploitation of this vulnerability it is necessary to define the...

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 nuclei templates Dec Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD...

CVE-2026-129099

Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...

CVE-2026-129099 Cudy TR3000 before 2.5.42 Root RCE via OpenVPN Configuration Import

Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...

EUVD-2026-125450

Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...

CVE-2026-129099

The Cudy TR3000 router, running firmware versions before 2.5.42 , is vulnerable to a remote code execution (RCE) flaw. The issue stems from an incomplete denylist that fails to filter specific OpenVPN client configuration directives, such as tls-verify or ipchange. An authenticated administrator ...

cve-2024-7646

CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...

CVE-2023-28432

CVE-2023-28432 MiniO verify interface sensitive information disclosure vulnerability CVE-2023-28432 Chinese name: MinIO verify 接口敏感信息泄露漏洞（CVE-2023-28432） Description : MinIO is an open source object storage service that is compatible with the Amazon S3 API and can be used in private or public...

CVE-2026-127278

A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function sendverificationcode of the file registry-server/app/account/serviceauth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper...

CVE-2026-127278

The software AIP-PUB ACPs-community (up to version 2.2.0 ) is vulnerable to improper authentication within the verify-code Endpoint . Specifically, a manipulation of the phone argument in the send_verification_code function located in registry-server/app/account/service_auth.py allows for remote ...

CVE-2026-127278 AIP-PUB ACPs-community verify-code Endpoint service_auth.py send_verification_code improper authentication

A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function sendverificationcode of the file registry-server/app/account/serviceauth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper...

EUVD-2026-124814

A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function sendverificationcode of the file registry-server/app/account/serviceauth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper...

PT-2026-146105

A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send verification code of the file registry-server/app/account/service auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper...

PT-2026-146946

Cudy TR3000 before 2.5.42 contains a remote code execution vulnerability that allows authenticated administrators to run root commands by importing a malicious OpenVPN client configuration. Attackers can include tls-verify or ipchange directives, which the incomplete denylist does not filter, to...

candlepin: candlepin: broken object-level authorization via VerifyAuthorizationFilter multi-@Verify hasAccess latching

A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object ca...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...

Security Bulletin: Security vulnerability has been detected in IBM Security Verify Governance Identity Manager Adapters

Summary Security vulnerability has been addressed in IBM Security Verify Governance Identity Manager Adapter for Google Workspace. Vulnerability Details CVEID:CVE-2026-102554 DESCRIPTION: Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Gua...