GHSA-8575-CR6V-7JH4 Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

CVE-2026-106575

A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...

wp-CVE-2017-5487-exploit

WordPress CVE-2017-5487 Python 漏洞利用 使用示例： python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2018-1049-POC

此 Python 脚本是 Metasploit 模块针对 CVE-2018-1049 漏洞利用的自定义重新实现，通过 sudo 滥用的 Perl 脚本中的提权漏洞，针对 VyOS（Vyatta）系统。 你需要有效的 SSH 凭据。 你通过 sudo 许可脚本中的命令注入获得 root 权限。 尽管它针对的是本地脚本，但该漏洞是通过 SSH 远程发起的。 此项目基于 APT Volt Typhoon 的 TTP，用于一项全州范围的网络安全计划。...

CVE-2025-66177

⚠️ 免责声明 / 责任免除 西班牙语： 本代码及相关材料仅用于教育目的、安全研究以及合法且经授权的渗透测试。未经系统所有者事先明确书面同意，将此脚本用于针对目标的行为均属非法，并严格禁止。 作者对因直接或间接使用本工具而导致的误用、损害或法律后果不承担任何责任。下载或使用本代码即表示您同意对自己的行为承担全部责任。 英语： 本代码及任何相关材料仅供教育目的、安全研究以及经授权的合法渗透测试使用。未经系统所有者事先明确书面同意，将此脚本用于针对目标的行为是非法的，并严格禁止。...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

DEBIAN-CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

GHSA-R5MF-4R5X-Q78F Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable

Summary The error page that Quasar CLI shows when an SSR or SSG render throws in development serializes every variable in process.env, every request header and every cookie into the HTTP response, and the dev server binds 0.0.0.0 by default. Any host that can reach the port therefore gets the...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit 我为 CVE-2025-24367 编写了这个小型脚本——针对 Cacti 1.2.28 版本，该脚本利用 Cacti 的漏洞获取 webshell。 脚本使用方法： python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario" --password "password" 连接成功后，将在参数 danshell.php?0= 中生成一个 webshell，您可以在其中执行命令，主要是 shell。...

CVE-2026-106575

The open-source image manipulation library ImageMagick is vulnerable to a resource exhaustion issue in versions prior to 7.1.2-31 . A crafted Magick script can cause an opened file pointer to remain unclosed, which allows repeated processing to exhaust available file descriptors . This vulnerabil...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

EUVD-2026-94394

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2015-1635_PoC

使用方法： python3 CVE-2015-1635PoC.py 例如： python3 CVE-2015-1635PoC.py http://www.xxx.com...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 这篇文章是关于 CVE-2022–24992 的，这是我获得的第一个 CVE，它涉及 QRCDR 广泛使用的 QR-Code 生成器脚本中的一个漏洞。 更多信息 此致， n0lsec...

CVE-2024-6387-nmap

OpenSSH 漏洞检查器 Nmap 脚本 描述 openssh-vuln-checker.nse 脚本用于检查服务器是否运行存在漏洞的 OpenSSH 版本（CVE-2024-6387）。它会连接到 SSH 端口，获取 SSH 横幅，并将其与已知存在漏洞的版本列表进行比对。 存在漏洞的版本 该脚本会检查以下存在漏洞的 OpenSSH 版本： SSH-2.0-OpenSSH8.5p1 SSH-2.0-OpenSSH8.6p1 SSH-2.0-OpenSSH8.7p1 SSH-2.0-OpenSSH8.8p1 SSH-2.0-OpenSSH8.9p1 SSH-2.0-OpenSSH9.0p...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900 是微软 WinVerifyTrust 函数处理 Windows Authenticode 签名验证方式中的一个远程代码执行漏洞。此缺陷允许攻击者修改已签名的可执行文件，通过在文件未经验证的部分添加恶意代码而不使其签名失效。 此漏洞的缓解措施是一项需要特定注册表设置的可选功能。启用后，Windows 将对 Authenticode 签名执行更严格的验证，确保签名文件中不存在无关数据。 -WinVerifyTrust-签名验证-CVE-2013-3900-缓解 Define the registry key paths $regPath32 =...