Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier contain...

Apache Tomcat Path Equivalence - Remote Code Execution

Path Equivalence- 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. id: CVE-2025-24813 info: name: Apache Tomcat Path Equivalence - Remote Code Execution...

CVE-2026-29041

CVE-2026-29041 — Authenticated RCE via Unrestricted File Upload in Chamilo LMS 1.11.32 -yellow?style=for-the-badge Authenticated Remote Code Execution in Chamilo LMS 1.11.32 via improper file upload validation in the ckuploadimage AJAX endpoint. A low-privileged student can upload a PHP web shell...

CVE-2026-33229

CVE-2026-33229 — XWiki RCE via Apache Velocity Sandbox Bypass A Remote Code Execution vulnerability in XWiki Platform that allows an authenticated user with scripting permissions to bypass the Apache Velocity sandbox entirely — no Java Reflection required — by traversing pre-instantiated objects...

CVE-2025-49844-Vulnerability-Scanner

ماسح الثغرة الأمنية CVE-2025-49844 RediShell أداة شاملة لفحص خوادم Redis بحثًا عن الثغرة الأمنية الحرجة CVE-2025-49844 RediShell. حول الثغرة الأمنية معرف CVE : CVE-2025-49844 الاسم : RediShell درجة CVSS : 10.0 حرجة النوع : استخدام بعد التحرير UAF في مترجم Lua التأثير : تنفيذ التعليمات البرمجية عن...

CVE-2026-20180

Cisco ISE RCE: تحليل متقدم للاستغلال والمعالجة 📋 جدول المحتويات 1. الملخص التنفيذي 2. تحليل سطح الهجوم 3. نواقل الاستغلال 4. تقنيات التهرب المتقدمة 5. التأثير النظامي على بنى Zero Trust 6. استراتيجية المعالجة 7. التحقيق الجنائي الرقمي 8. المراجع 🎯 الملخص التنفيذي تمثل ثغرات تنفيذ الأوامر عن بُعد...

CVE-2026-22812

CVE-2026-22812 Vue d'ensemble Un outil d'exploitation en Python pour la vulnérabilité d'exécution de code à distance RCE d'OpenCode affectant les versions v1.0.216. Cet outil fournit plusieurs vecteurs d'attaque, notamment l'exécution de commandes, la lecture/écriture de fichiers, le...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...

springshell-rce-poc

CVE-2022-22965 - vulnerable app and PoC Trial & error root@kitploit: $ docker rm -f rce; docker build -t rce:latest . && docker run -d -p 8080:8080 --name rce rce:latest && sleep 5 && python poc.py Output example root@kitploit: rce...

CVE-2019-19609

CVE-2019-19609 Strapi Remote Code Execution Usage python3 exploit.py rhost jwt url lhost Exploit POC https://bittherapy.net/post/strapi-framework-remote-code-execution/...

ciscoasa_honeypot

هونيبوت Cisco ASA Cymmetria Research, 2018. https://www.cymmetria.com/ اتصل بنا: [email protected] هونيبوت منخفض التفاعل لمكوّن Cisco ASA، قادر على اكتشاف CVE-2018-0101، وهي ثغرة تتيح حجب الخدمة DoS وتنفيذ التعليمات البرمجية عن بُعد تم إصداره بموجب رخصة MIT لاستخدام المجتمع. الاستخدام...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2026-19116

The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...

CVE-2026-14357

The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEVinstallthemesfunc function registered on the wpajaxDPDEVinstallthemes action. This makes it possib...

CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Description This repository contains a Python exploit for CVE-2019-16278 , a vulnerability in Nostromo 1.9.6 a web server. The vulnerability allows for Remote Code Execution RCE by exploiting...

weblogic_honeypot

वेबलॉजिक हनीपॉट Cymmetria Research, 2018. https://www.cymmetria.com/ द्वारा लिखित: Omer Cohen @omercnet विशेष धन्यवाद: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev संपर्क: [email protected] वेबलॉजिक हनीपॉट एक कम-इंटरैक्शन हनीपॉट है जो Oracle Fusion Middleware के Oracle WebLogic Server घट...

PoC_CVE-2016-2098_Rails42

إثبات مفهوم لـ CVE-2016-2098 rails 4.2.5.1 الـ view يحتوي على كود ضعيف app/views/poc/render1.html.erb الأمر التالي سيؤدي إلى تنفيذ كود عن بُعد $ curl ':3000/poc/render1?template\inline='...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versions 4.33.0 - Remote Code Execution Description In versions 4.33.0 of Statamic CMS where the front-end has a form with active file upload, it is possible to send PHP files created to look like images, regardless of the mime validation rules. This vulnerability...