CVE-2026-73456

Arista EOS platforms with the gNPSI (gRPC Network Packet Sampling Interface) enabled are vulnerable to unauthenticated arbitrary code execution via crafted gNPSI requests (CWE-94, code injection), granting full administrative control of the switch. CVSS 3.1 score: 10.0 . Exploitation requires gNP...

CVE-2026-73456 Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised...

EUVD-2026-81006

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised...

CVE-2026-91105 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

EUVD-2026-81005

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91105

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

EUVD-2026-81004

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-32710

CVE-2026-32710 MariaDBJSONSCHEMAVALID 中的堆缓冲区溢出 → 持久化权限提升 → UDF 远程代码执行 | ---|--- 受影响版本| MariaDB 11.4.x（已在 11.4.9 上确认） 漏洞| jsongetnormalizedstring 中的越界写入 — strncpy 写入 128 字节的 DYNAMICSTRING，无边界检查 影响| 仅具有 SELECT 权限的用户 → ALL PRIVILEGES WITH GRANT OPTION → 通过 UDF 执行任意命令 源码位置| sql/jsonschemahelper.cc:91...

CVE-2026-91102 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91099

HP Linux Imaging and Printing (HPLIP) has been affected by multiple externally reported vulnerabilities across several software components. HP states the findings could potentially enable remote code execution , privilege escalation , denial of service , information disclosure , or unauthorized f...

EUVD-2026-80992

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91097 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2022-46169

CVE-2022-46169 POC これは、Cacti バージョン 1.2.22 に影響を与える CVE-2022-46169 脆弱性の概念実証 POC スクリプトです。 説明 CVE-2022-46169 脆弱性は、Cacti バージョン 1.2.22 までのバージョンにおいて、認証されていないコマンドインジェクションを許容し、www-data ユーザーとして認証されていないリモートコード実行を達成するものです。この脆弱性は、"remoteagent.php" ファイルの "hostid" パラメータにおけるユーザー入力の不適切な検証に起因します。 使用方法 root@kitploi...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM 预认证 RCE 模拟靶标 一个简单的演示应用，用于展示如何复现 Ivanti EPMM 预认证 RCE 漏洞（CVE-2026-1281 / CVE-2026-1340），仅供教育和安全研究目的使用。 漏洞概述 该漏洞利用了 Bash 算术展开（arithmetic expansion）的行为。当在算术上下文中使用一个包含对其他变量引用的变量时，如果被引用的变量包含带有命令替换的数组索引，则该命令会被执行。 利用链 1. 请求包含 st=theValue （字面字符串 "theValue" 并带有填充） 2. 请求包含...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 零日漏洞 CVE-2026-20131 自 2023 年起被利用以获取管理员访问权限。 本仓库包含针对 CVE-2026-20131 的可运行概念验证（PoC）漏洞利用代码。该漏洞是 Cisco Catalyst SD-WAN Controller（原 vSmart）和 Catalyst SD-WAN Manager（原 vManage）中的一个严重预认证漏洞，自 2023 年以来已在野外被积极利用。 该漏洞自 2023 年以来已在野外被积极利用。 被 Cisco...

CVE-2026-23918

CVE-2026-23918 Apache HTTP/2 扫描器 这是一个用于安全审计的主动式工具。对于您的 GitHub 仓库，您需要一个能够突出其安全性（非侵入式）及其对系统管理员特定实用性的描述。 以下是为您的 GitHub 描述提供的几个选项，以及一个 README.md 模板。 GitHub 仓库描述 CVE-2026-23918 扫描器：一款基于 Python 的非侵入式工具，用于检测 Apache HTTP/2 双重释放漏洞。无需利用漏洞即可安全审计生产服务器，识别存在漏洞的版本和 HTTP/2 配置。 README.md 模板 您可以将其复制粘贴到您的 README.md...

CVE-2026-26221-Hyland-OnBase-Timer-Service-Unauthenticated-RCE

📡 Hyland OnBase 定时服务未授权 RCE Mohammed Idrees Banyamer 安全研究员 约旦 🇯🇴 🧨 概述 本仓库包含针对 Hyland OnBase 定时服务 未授权远程代码执行漏洞的概念验证（PoC）利用程序，该漏洞源于不安全的 .NET Remoting BinaryFormatter 反序列化 。 该漏洞允许未授权攻击者向定时服务端点发送精心构造的 BinaryFormatter 载荷，并以 NT AUTHORITY\SYSTEM 权限执行任意代码。 产品： Hyland OnBase Workflow / Workview 定时服务 端口：...

CVE-2026-92718

Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary...

POC-CVE-2026-63030-CVE-2026-60137-

PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137 -red?style=for-the-badge 📌 总览 Overview WP2Shell 是 WordPress Core 源码中的一条严重漏洞利用链 Exploit Chain，允许未经身份验证的远程攻击者 Unauthenticated Remote Attacker 完全控制服务器 Full Server Takeover / RCE。 该漏洞利用链结合了两个安全漏洞： 1. CVE-2026-63030 REST API Batch Route Confusion:...