EUVD-2026-96348

PDFMathTranslate pdf2zh through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translatefile handler passes user URLs to downloadwithlimit without scheme or address validation, letti...

CVE-2026-108554

PDFMathTranslate pdf2zh through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the Link input. The translatefile handler passes user URLs to downloadwithlimit without scheme or address validation, letti...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Scanner professionale per vulnerabilità RCE in Next.js RSC per CVE-2025-66478 🎯 Panoramica React2Shell Ultimate è uno scanner completo per vulnerabilità per CVE-2025-66478 — una vulnerabilità critica di Esecuzione Remota di Codice RCE che colpisce le applicazioni...

CVE-2026-108161

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...

EUVD-2026-96316

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...

CVE-2026-108161

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...

react2shell

React2Shell: RCE 0-day nei React Server Components CVE-2025-55182 React e CVE-2025-66478 Next.js Questo repository contiene codice exploit per test di sicurezza autorizzati e solo a scopo educativo. Vedi anche: Molti ricercatori hanno pubblicato analisi di questa vulnerabilità. Controlla la sezio...

react2shell-scanner

react2shell-guard Sicherheitsscanner für CVE-2025-55182 – eine kritische CVSS 10.0 nicht authentifizierte Remote-Code-Ausführungs-Sicherheitslücke in React Server Components. ⚠️ HAFTUNGSAUSSCHLUSS Dies ist ein Sicherheitsscanner , KEIN Exploit-Tool. Es soll Entwicklern und Sicherheitsteams helfen,...

kraker

Acerca de Configuración Servidor Configuración Agente Configuración Compilar desde el código fuente Usar la versión precompilada Contactos Acerca de Kraker es un sistema distribuido de fuerza bruta de contraseñas que te permite ejecutar y gestionar hashcat en diferentes servidores y estaciones de...

cve-2022-36804

CVE-2022-36804: RCE pre-autenticazione in Atlassian Bitbucket Server Una vulnerabilità critica di command injection è stata trovata in molteplici endpoint API di Atlassian Bit bucket Server e Data center. Questa vulnerabilità riguarda tutte le versioni di Bitbucket Server e Data Center rilasciate...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, crossplane-provider-aws-efs-fips, chainloop-cli-fips, osv-scanner, crossplane-provider-aws-licensemanager-fips, longhorn-manager-fips, monstache, spire-controller-manager-fips, helm-operator-fips, crossplane-provider-aws-kendra-fips,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: node-feature-discovery, crossplane-provider-aws-efs-fips, chainloop-cli-fips, osv-scanner, crossplane-provider-aws-licensemanager-fips, longhorn-manager-fips, monstache, spire-controller-manager-fips, helm-operator-fips, crossplane-provider-aws-kendra-fips,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-workhorse-ee-fips, ingress-nginx-controller, tigera-operator, commercial-grafana, commercial-spilo-fips, reports-server, aactl, loki, telegraf, spire-server, kube-conformance, commercial-chainloop-cli, nemo-gym, frankenphp-8.4, nemo, consul-k8s,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, crossplane-provider-aws-efs-fips, chainloop-cli-fips, osv-scanner, crossplane-provider-aws-licensemanager-fips, longhorn-manager-fips, monstache, spire-controller-manager-fips, helm-operator-fips, crossplane-provider-aws-kendra-fips,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, rancher-agent, opencost, flux, step, k6, grafana-alloy, openbao, gitlab-pages, gitness, zarf, hubble-ui, external-dns, cert-manager, ingress-nginx-controller, cloudprober, juicefs, karpenter, mesosphere-vsphere-csi, rancher,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, rancher-agent, opencost, flux, step, k6, grafana-alloy, openbao, gitlab-pages, gitness, zarf, hubble-ui, external-dns, cert-manager, ingress-nginx-controller, cloudprober, juicefs, karpenter, mesosphere-vsphere-csi, rancher,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

react2shellpoc

Questo repository contiene una prova di concetto che dimostra come una specifica classe di vulnerabilità dei React Server Component si comporta all'interno di un ambiente di formazione controllato e legale. Manuale ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /...