CVE-2021-35956

CVE-2021-35956. Prueba de concepto del exploit para CVE-2021-35956, AKCP sensorProbe - 'Múltiples' Cross Site Scripting XSS. Título del exploit: AKCP sensorProbe - 'Múltiples' Cross Site Scripting XSS. Fecha: 07-01-2021. Autor del exploit: Tyler Butler. Página web del proveedor:...

CVE-2026-87289

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-static-content. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attac...

CVE-2026-83281

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Helidon. Successful attacks of this...

CVE-2026-83280

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

EUVD-2026-79938

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-static-content. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attac...

EUVD-2026-79633

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Helidon. Successful attacks of this...

CVE-2026-83280

CVE-2026-83280 is a Denial of Service vulnerability in Oracle Helidon (component: helidon-webserver-http2 ), part of Oracle Fusion Middleware. Affected versions are 4.0.0 through 4.5.4 . An unauthenticated attacker with network access can send crafted requests via HTTP/2 to cause a hang or freque...

CVE-2026-83281

CVE-2026-83281 is a Denial-of-Service vulnerability in Oracle Fusion Middleware Helidon , specifically the helidon-webserver component, affecting versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash, resulting in a ...

EUVD-2026-79632

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-1758

Session fixation vulnerability in Secomea GateManager webserver module allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above...

CVE-2026-1758

CVE-2026-1758 is a session fixation vulnerability in the webserver module of Secomea GateManager , a security access control management platform. The flaw affects GateManager versions 11.5;0 and 11.4.625515072:0 , and is remediated in version 11.6 or 11.4.626194074 and above . The CVSS v3.1 score...

CVE-2021-31630

OpenPLC WebServer v3 - RCE Autenticado CVE-2021-31630 Este exploit está basado en el exploit de Exploit-DB hecho por Fellipe Oliveira. Primero, autenticarse Subir un archivo C malicioso Compilarlo Iniciar el PLC iniciar reverse shell Detener el PLC no es necesario ejecutarlo, la reverse shell ya ...

Odysseus

Odysseus Una demo de la vulnerabilidad Log4Shell CVE-2021-44228. Instrucciones de compilación El servidor web vulnerable y el servidor LDAP malicioso fueron compilados y probados en JDK 1.8.0181. Servidor web de los buenos 1. Dentro de goodguys, ejecute gradlew bootJar 2. Ejecute el servidor web...

CVE-2021-31630

CVE-2021-31630 OpenPLC 3 WebServer Ejecución Remota de Código Autenticada. Descripción La presencia de Inyección de Comandos en Open PLC Webserver v3 permite a atacantes remotos ejecutar código arbitrario. Solo probado en la máquina HTB Wifinetictwo.htb. Encontré problemas con todos los scripts q...

CVE-2022-39073

CVE-2022-39073 Detalles del firmware: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Requisitos previos requests pip install requests Inyección de comandos La vulnerabilidad es una inyección de comandos compartida entre el binario ztenetlinkdetect ...

CVE-2026-90668

A flaw was found in UnrealIRCd. The webserver component does not properly limit the number of HTTP request headers. A remote attacker can exploit this vulnerability by sending an HTTP request with an excessive number of headers, leading to memory consumption and an unresponsive server. This can...

CVE-2026-90668

The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service memory consumption and unresponsive server via an HTTP request with an unlimited number of headers, if a websocket or JSON-RPC...

CVE-2021-31630-OpenPLC-3-Authenticated-RCE

CVE-2021-31630 Ejecución remota de código autenticada en el servidor web de OpenPLC 3. Descripción La presencia de inyección de comandos en el servidor web de OpenPLC v3 permite a atacantes remotos ejecutar código arbitrario explotando el componente "Hardware Layer Code Box" que se encuentra en l...

CVE-2024-4577_Analysis

CVE-2024-4577 Analysis Above is my analysis report, besides, there are also information about: - Webserver Apache configuration - Debugger for PHP Documents for my report: https://nvd.nist.gov/vuln/detail/CVE-2024-4577...

Linux Distros Unpatched Vulnerability : CVE-2026-23930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend...