CentOS Linux 7 [TuxCare] Security Update: gnome-shell (CENTOS7:CLSA-2024:1735300286)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1735300286 advisory. - In GNOME Shell through 45.7, a portal helper can be launched automatically without user confirmation based on network responses provided by an...

Rocky Linux 8 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2025_1917)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20251917 advisory. emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme CVE-2025-1244 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1780708480)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780708480 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing...

CentOS Linux 8 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS-STREAM8:CLSA-2026:1781082176)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1781082176 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.2:CLSA-2026:1779821440)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779821440 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find...

CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS-STREAM8:CLSA-2026:1767800942)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1767800942 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783357653)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783357653 advisory. - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17,...

CentOS Linux 7 [TuxCare] Security Update: emacs / emacs-common / emacs-el / emacs-filesystem / emacs-nox / etc (CENTOS7:CLSA-2024:1728055873)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1728055873 advisory. - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c...

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787056678)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787056678 advisory. - A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile...

CentOS Linux 8.5 [TuxCare] Security Update: ctdb / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.5:CLSA-2026:1780943682)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780943682 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc (CENTOS8.4:CLSA-2026:1767613214)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1767613214 advisory. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query strin...

ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 利用包装器 MS09-050 CVE-2009-3103 漏洞利用的一行设置。无需折腾，无需调试，直接生效。 为什么？ 大多数流传的 MS09-050 脚本需要手动注入 shellcode，与处理程序存在时序问题，或者干脆无法运行。本包装器： 生成带正确参数的 shellcode 自动构建漏洞利用代码 创建可直接使用的 Metasploit 处理程序 精确告知需要运行的命令 专为 OSCP 备考打造，时间至关重要。 目标 漏洞 : MS09-050 / CVE-2009-3103 影响范围 : Windows Vista SP1/SP2, Windows...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 自動シェルアップロード WordPress Royal Elementor 1.3.78 シェルアップロード Visit https://phankz.com...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType 可变字体生成器漏洞利用工具 此仓库包含针对 Hack The Box 上 VariaType 机器的专用漏洞利用工具。该漏洞利用利用了 fontTools 库或 Web 应用程序处理 .designspace XML 文件和元数据插值时的漏洞，以实现远程代码执行 RCE 。 📝 描述 该漏洞存在于字体生成过程中。通过构造恶意的 designspace 文件，我们可以将 PHP 反向 shell 载荷注入到字体的元数据中（特别是 字段）。当服务器处理这些文件以生成可变字体时，它会将输出写入用户定义的路径，从而允许我们将 .p...

CVE-2026-34990-poc

CVE-2026-34990：CUPS 2.4.16 本地权限提升 PoC 这是对原始 CUPS 漏洞披露及 PoC 的 Python3 改编版本，以普通本地用户身份针对现有 CUPS 服务运行。它演示了泄露的 Authorization: Local 令牌以及一个允许 CUPS 以 root 身份写入文件的竞态条件。 用法 python3 cve-2026-34990.py --check 测试是否存在 root 拥有的文件写入 python3 cve-2026-34990.py 打开 root shell python3 cve-2026-34990.py -c 'id' 以 roo...

rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

CVE-2026-51858

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shellexec allows prompt-driven shell command execution without an approval boundary...

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite ZCS to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 CVSS score: 8.9, an unauthenticated operating system comman...

CVE-2019-7069-POC

Kibana ⚠️ 免責事項: このスクリプトは教育目的および許可された侵入テスト のみを対象としています。所有していない、または明示的なテスト許可がないシステムで使用しないでください。作者および貢献者は、このツールの誤用や損害について一切責任を負いません。 🎯 これは何ですか？ これは、Kibanaバージョン 6.6.1 の リモートコード実行脆弱性 に対するPython 3エクスプロイトスクリプトです。プロトタイプ汚染の欠陥を利用して、脆弱なKibanaインスタンス上で任意のコマンドを実行し、リバースシェルを起動することも可能です。 🕹️ 特徴 Kibanaのバージョンを自動検出...

ish

iSH iSHは、ユーザーモードのx86エミュレーションとシステムコールの翻訳を使用して、iOS上でLinuxシェルを実行するプロジェクトです。 プロジェクトの現状については、issueタブとコミットログを確認してください。 App Storeページ TestFlightベータ Discordサーバー ヘルプとチュートリアルのWiki ハッキング このプロジェクトにはgitサブモジュールがあります。--recurse-submodulesを使用してクローンするか、クローン後にgit submodule update --initを実行してください。...