CVE-2026-48282

CVE-2026-48282-POC CVE-2026-48282 — это уязвимость типа path traversal в Remote Development Service RDS от Adobe ColdFusion с оценкой CVSS 10.0 Critical. Она позволяет неавторизованным атакующим читать и записывать произвольные файлы через конечную точку /CFIDE/main/ide.cfm, что приводит к Remote...

Log4j-Vulnerability

Vulnérabilité Log4j Tutoriel: https://youtu.be/PNDBjoT83zA Tutoriel: https://cryptodeeptech.ru/log4j-vulnerability Contexte sur Log4j L'équipe de sécurité d'Alibaba Cloud a divulgué publiquement une vulnérabilité critique CVE-2021-44228 permettant une exécution de code à distance non authentifiée...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Уязвимость подделки серверных запросов Server Side Request Forgery в SAP NetWeaver Development Infrastructure root@kitploit: Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20,...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. Эта некорректная нормализация URL позволяет нам получить доступ к произвольному backend URL при работе от имени учётной записи машины Exchange Server. Хотя эта уязвимость не так мощна, как SSRF...

CVE-2023-30212-OURPHP-Vulnerability

このリポジトリには README がありません。...

CVE-2021-3560_Polkit

CVE-2021-3560 Polkit Élévation locale de privilèges root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ Un exploit automatisé pour la vulnérabilité...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Contournement de chemin et RCE CVE-2021-41773 Un exploit sophistiqué en Python basé sur une preuve de concept PoC pour CVE-2021-41773. Cet outil automatise le test des serveurs Apache 2.4.49 pour les vulnérabilités de contournement de chemin et d'exécution de code à...

CVE-2023-41507

CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6은 store locator 구성 요소에서 products, distance, lat, lng 매개변수를 통해 여러 SQL 인젝션 취약점이 발견되었습니다. Vulnerability Type SQL 인젝션 Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - 영향을 받는 버전 3.6 이하. 버전 3.7에서 수정됨 CVSS v3.1...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Voir plus sur Google : https://g.co/kgs/FUZgoXi Médias Hacker Blogs Il y a BEAUCOUP de blogs sur le pentesting, voici ceux que je surveille constamment et que je trouve utiles dans le travail quotidien de test. Carnal 0wnage - atom McGrew Security GNUCITIZE...

CVE-2026-79793

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has be...

CVE-2026-75421

aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...

CVE-2026-65091

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65099

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65096

NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...