Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account

The command injection vulnerability in the CGI program "remotehelp-cgi" in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an unauthenticated attacker to execute some operating system OS commands by sending a crafted HTTP POST...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2021.0.8 13.0.8, 2021.1.6 13.1.6, 2022.0.6 14.0.6, 2022.1.7 14.1.7, and 2023.0.3 15.0.3, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to MOVEit...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

GLPI < 10.0.17 - Pre-Auth SQL Injection

A pre-authentication SQL injection vulnerability exists in the Inventory feature of GLPI. The vulnerability is caused by insufficient sanitization of user input in the handleAgent function when processing XML requests. The issue occurs because SimpleXMLElement objects can bypass the...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

CVE-2018-25031-test2

This repository does not have a README...

GHOSTCHECK-cve-2015-0235

Ghostcheck This is a really, really light fabric script - for checking the impact of CVE-2015-0235 GHOST on a running linux host. Forked into Lyrical after writing. Python 2.6 and higher recommended, and Fabric is needed. Usage: fab -f ghostcheck.py -u sshusername -p sshpassword -H ip ,ip2 ,ipN g...

chrome_v8_ndays

✓| ID| Version| Hash ---|---|---|--- ✓| CVE-2020-6383| 80.0.3987.116| 25c49d2bd6 ✓| CVE-2020-6418| 80.0.3987.122| bdaa7d66a3 ✓| CVE-2020-6507| 83.0.4103.106| 5db4a28ef7 ✓| CVE-2020-16040| 87.0.4280.88| 2781d58503 ✓| CVE-2021-21220| 89.0.4389.128| 09ecd88ef2 ✓| CVE-2021-21224| 90.0.4430.85|...

secuimag3a

Based on a flaw or vulnerability either proposed by the instructor or chosen by you which must be related to the proposed theme: Specify which service or program is compromised, and what type of compromise it is Explain the vulnerability, describe the mechanism used to exploit it Does this flaw...

CLEANSTART-2026-YR89103 Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. Apache HTTP Server versions 2...

CLEANSTART-2026-QB44959 In Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. In Apache HTTP Server versions 2...

CLEANSTART-2026-XG20648 It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2

Security vulnerability affects the apache2 package. It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2...

openclarity

OpenClarity es una herramienta de código abierto para la detección sin agente y la gestión de la lista de materiales de software SBOM de máquinas virtuales, así como de amenazas de seguridad como vulnerabilidades, exploits, malware, rootkits, configuraciones incorrectas y secretos filtrados. Únet...

CLEANSTART-2026-KY85414 (*x509

Security vulnerability affects the victoria-metrics package. x509...

CLEANSTART-2026-DF92501 containerd is an open-source container runtime

Security vulnerability affects the syft package. containerd is an open-source container runtime...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

CVE-2017-11882

CVE-2017-11882 Empire Port of CVE-2017-11882 Code shifted to another parent repository. Redirect?...

ansible-role-cve

Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. cve20165195: false Example Playbook --- - hosts: localhost connection:...

Linux Distros Unpatched Vulnerability : CVE-2026-97030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that...