CVE-2023-27035

CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Tipo de vulnerabilidad: Control de acceso incorrecto Descripción: Un problema descubierto en Obsidian Canvas 1.1.9 permite a atacantes remotos enviar notificaciones de escritorio, grabar audio del usuario y otros impactos no especificado...

CVE-2023-29489

Exploit de CVE-2023-29489 Este script puede explotar muchos sitios web mediante CVE-2023-29489 vulnerabilidad XSS Uso python3 CVE-2023-29489.py list.txt Mi canal :...

CVE-2026-101041

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2026-101041 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2026-101041 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover

The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...

CVE-2018-7669

CVE-2018-7669 Bruteforcer rápido y sencillo para CVE-2018-7669 Vulnerabilidad de Directory Traversal en Sitecore Uso: ./bruteforce.py https://target.com PotentialWebsiteName1 PotentialWebsiteName2 127.0.0.1:8080...

Added-Pentest-Ground-to-vulnerable-websites-for-training

https://vulners.com/cve/CVE-2017-0089 Uniscribe en Microsoft Windows Vista SP2, Windows Server 2008 SP2 y R2 SP1, y Windows 7 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un sitio web manipulado, también conocida como "Vulnerabilidad de ejecución remota de código en...

aarif450.github.io

dkpsir.github.io Official educational website of D. Kiran Prasad containing lecture videos, notes, and academic resources...

CVE-2024-9796

CVE-2024-9797 针对CVE-2024-9796的易受攻击的网站...

CVE-2026-55214

GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...

gha-lab-b5c1313658

Artefacto de investigación automatizado — no es el proyecto original. Este repositorio es un laboratorio desechable construido por un sistema automatizado para una tesis de maestría en la Université Laval sobre la reproducción de vulnerabilidades publicadas en flujos de trabajo de GitHub Actions...

CVE-2026-55214

The asset and IT management software GLPI versions 11.0.6 through 11.0.8 are vulnerable to a stored cross-site scripting (XSS) flaw. An authenticated technician can exploit this by storing active markup within the supplier website fields . When any user subsequently views the affected item's supp...

CVE-2026-55214 GLPI: Stored XSS in suppliers

GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...

CVE-2026-55214 GLPI: Stored XSS in suppliers

GLPI is a free asset and IT management software package. From 11.0.6 until 11.0.8, an authenticated technician can store active markup in supplier website fields. Any user who opens the affected item's suppliers list triggers the stored cross-site scripting payload. This issue is fixed in version...

CVE-2026-62062

Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...

TeamsNTLMLeak

Descripción Cuando un usuario navega a una pestaña "Website" que dirige a una página web especialmente diseñada, puede resultar en la exposición del hash NTLM mediante la activación de un esquema de URL de Office, reduciendo así el proceso a una ruta de un solo clic para la fuga. Si se intenta...

EUVD-2026-86532

Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...

CVE-2026-62062

The Elementor Website Builder plugin for WordPress (versions n/a through 4.3.1 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of a victim user. While the high CVSS score of 8.8 indicates significant impa...

CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...

WordPress Elementor Website Builder plugin 4.3.0-4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Saggre in WordPress Plugin Elementor Website Builder versions 4.3.0-4.3.1...