exploit-CVE-2026-2670

exploit-CVE-2026-2670 CVE-2026-2670 – PoC de Inyección de Comandos en Advantech WISE-6610 Exploit de prueba de concepto que demuestra una vulnerabilidad de inyección de comandos en el router celular industrial Advantech WISE-6610. La vulnerabilidad existe en el endpoint...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2025-48461

CVE-2025-48461 Cookies de sesión predecibles que pueden ser forzados por fuerza bruta para obtener acceso no autorizado al portal Advantech WISE Resumen Durante el examen del portal web Advantech WISE-4060, he descubierto que las cookies de sesión utilizadas para autenticarse en el portal web...

CVE-2025-66680

CVE-2025-66680 В Wise Force Deleter 1.5.7.59 и более ранних версиях злоумышленник с правами локального администратора может удалить произвольный файл в файловой системе, используя приложение в качестве оружия. Использование 1. Поместите WiseDelfile64.sys в C:\Windows 2. Скомпилируйте проект 3...

CVE-2025-48466

CVE-2025-48466 Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control. see script: main.py Summary I was able to figure out that it is just very easy to somehow manipulate the Modbus server running on an IoT Gateway for door control on a network. Any remote attacker...

Advantech WISE-IoTSuite/SaaS - SQL Injection

Advantech WISE-IoTSuite/SaaS Composer suffers from an unauthenticated SQL Injection vulnerability due to the unsafe use of the filename parameter within the URL path in PostgreSQL queries. Remote attackers can exploit this flaw by injecting SQL code such as the use of pgsleep for time delays to...

Unlearnable-Clusters

Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples Code relative to "Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples", CVPR2023. Preprocess First, run preprocess.py to rename the dataset directory root@kitploit: python preprocess.py --config config/preprocess.yaml...

CVE-2026-55859

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to charactersetclien...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD que remove PPL para 24H2 e 25H2 Uma escrita arbitrária de memória no handler do IOCTL 0x12C807 METHODNEITHER do Wise System Monitor v1.5.3.127 permite que atacantes causem a remoção de PPL ou negação de serviço DoS por meio de uma entrada manipulada. Informações...

PT-2026-83375

Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver encodes and decodes all character data assuming the connection character set is UTF-8. A server can announce a mid-session change to the character set client variable throu...

CVE-2026-66636

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

EUVD-2026-60921

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636

The WordPress Wise Chat plugin (versions ≤ 3.4) is vulnerable to contributor-level stored XSS, allowing authenticated users with contributor privileges to inject malicious scripts that execute in other users' browsers. CVSS 3.1 scores it MEDIUM (6.5) with network attack vector, low complexity, an...

CVE-2026-66636

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2026-66636 WordPress Wise Chat plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

PT-2026-77064

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

CVE-2016-20093

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that...

CVE-2016-20093

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that...

CVE-2016-20093 Wise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that...

CVE-2016-20093 Wise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 contain unquoted service path vulnerabilities in the WiseBootAssistant and SpyHunter 4 Service respectively, allowing local users to execute arbitrary code with SYSTEM privileges. Attackers can insert malicious executables in the system root path that...