Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 이 도구들은 오픈소스입니다. 리코딩할 수 있지만 작성자의 도구를 삭제하지 않도록 기억하세요. 이 도구들은 무료이며 판매용이 아닙니다!!! 결과 셸은 당신의 목록에 달려 있습니다!!! 여기서 Jenderal92는 웹사이트 시스템에 손상을 일으키는 도구의 오용에 대해 책임지지 않습니다. 가볍든 무겁든 모든 것은 사용에 달려 있습니다!!! 기부 : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money :...

CVE-2026-27597

CVE-2026-27597 - Exécution de code à distance Utilisation rapide root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notes d'exploitation Gravité : CRITIQUE CVSS : 10.0 Impact : Confidentialité, Intégrité, Disponibilité Publié : 2026-02-25 Résumé...

CVE-2025-54897-LAB

Lab : CVE-2025-54897 - Vulnérabilité de désérialisation dans Microsoft Office SharePoint 🚀 Présentation Ce lab démontre une vulnérabilité de désérialisation dans Microsoft Office SharePoint qui permet l'exécution de code à distance RCE. Le problème provient d'une gestion inappropriée de données...

cve-2019-5420-POC

Rails ActiveSupport Эксплойт CVE-2019-5420 POC считайте это для цепочки с CVE-2019-5418! Отлично сочетается с CVE-2019-5418! Скриншот POC 🚨 Предупреждение Этот репозиторий содержит эксплойт доказательства концепции PoC , демонстрирующий удаленное выполнение кода RCE в приложениях Ruby on Rails...

CVE-2026-0911

CVE-2026-0911 — Hustle 모듈 가져오기 PoC WordPress 플러그인 Hustlewordpress-popup, WPMU DEV에 대한 CVE-2026-0911 범위 내에서, 인증이 필요한 모듈 가져오기 엔드포인트를 통한 업로드 동작을 테스트하는 연구/펜테스트 보조 도구입니다. 이 저장소 또는 파일 세트 내의 CVE-2026-0911.py 스크립트는 소유한 시스템 또는 서면 허가를 받고 테스트하는 시스템에서만 사용해야 합니다. 간단한 요약 취약점 로직 영향을 받는 버전Wordfence/NVD: 7.8.9.2 ...

CVE-2026-3854

CVE-2026-3854: RCE в GitHub через инъекцию в заголовок X-Stat Практическое резюме того, как работает уязвимость, обнаруженная Wiz Research во внутреннем конвейере git push GitHub.com и GitHub Enterprise Server. Предупреждение Этот материал предназначен для образовательных целей и исследований в...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC La vulnérabilité dans Langflow 1.8.1 et versions antérieures permet à un attaquant distant non authentifié d'exécuter des commandes arbitraires sur l'hôte. Description Le point de terminaison POST /api/v1/buildpublictmp/flowid/flow permet à quiconque de construire...

CVE-2026-4447

CVE-2026-4447 - V8 dans Google Chrome avant exécution de code à distance Utilisation rapide root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notes d'exploitation Sévérité : ÉLEVÉE CVSS : 8.8 Impact : Confidentialité, Intégrité, Disponibilité Publié :...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier contain...

Apache Tomcat Path Equivalence - Remote Code Execution

Path Equivalence- 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. id: CVE-2025-24813 info: name: Apache Tomcat Path Equivalence - Remote Code Execution...

CVE-2026-29041

CVE-2026-29041 — Chamilo LMS 1.11.32의 무제한 파일 업로드를 통한 인증된 RCE -yellow?style=for-the-badge 인증된 원격 코드 실행RCE — Chamilo LMS 1.11.32의 ckuploadimage AJAX 엔드포인트에서 부적절한 파일 업로드 검증으로 인해 발생합니다. 낮은 권한의 학생이 이미지로 위장한 PHP 웹 셸을 업로드하여 서버 전체를 장악할 수 있습니다. 📋 취약점 요약...

CVE-2026-33229

CVE-2026-33229 — Apache Velocity 샌드박스 우회를 통한 XWiki RCE XWiki Platform 의 원격 코드 실행 취약점으로, 스크립팅 권한이 있는 인증된 사용자가 Java Reflection 없이도 Velocity 컨텍스트에 이미 존재하는 사전 인스턴스화된 객체를 탐색하여 Apache Velocity 샌드박스를 완전히 우회할 수 있습니다. 📄 전체 기술 세부 정보: youssefazefzaf.com/posts/cve 세부 정보...

CVE-2025-49844-Vulnerability-Scanner

Scanner de vulnérabilité CVE-2025-49844 RediShell Un scanner de vulnérabilité complet pour tester les instances Redis contre la vulnérabilité critique CVE-2025-49844 RediShell. À propos de la vulnérabilité ID CVE : CVE-2025-49844 Nom : RediShell Score CVSS : 10,0 Critique Type : Use-After-Free UA...

CVE-2026-20180

Cisco ISE RCE : Analyse Avancée de l'Exploitation et de la Remédiation 📋 Table des Matières 1. Résumé Exécutif 2. Analyse de la Surface d'Attaque 3. Vecteurs d'Exploitation 4. Techniques d'Évasion Avancées 5. Impact Systémique sur les Architectures Zero Trust 6. Stratégie de Remédiation 7...

CVE-2026-22812

CVE-2026-22812 Vue d'ensemble Un outil d'exploitation en Python pour la vulnérabilité d'exécution de code à distance RCE d'OpenCode affectant les versions v1.0.216. Cet outil fournit plusieurs vecteurs d'attaque, notamment l'exécution de commandes, la lecture/écriture de fichiers, le...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept Однокликовое RCE на OpenClaw через Cross-Site WebSocket Hijacking. ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Этот код предоставлен только для авторизованных исследований в области безопасности и образовательных целей. Использование этого кода против систем без явного письменного...

springshell-rce-poc

CVE-2022-22965 - 취약한 애플리케이션 및 PoC 시행착오 root@kitploit: $ docker rm -f rce; docker build -t rce:latest . && docker run -d -p 8080:8080 --name rce rce:latest && sleep 5 && python poc.py 출력 예시 root@kitploit: rce sha256:f626a2190dc0790c610afd4f12a4b2482b6a726d671fdac1432275de89c07cd6...