CVE-2025-54100

CVE-2025-54100 – PowerShell 响应解析 PoC 一个简洁的概念验证，展示CVE-2025-54100 如何通过恶意HTML解析在Windows PowerShell 5.1中导致远程代码执行（RCE）。 Table of Contents 什么是CVE-2025-54100？ PoC工作原理 快速开始 从受害者主机触发 故障排除与验证 证据 缓解措施 免责声明 参考资料 什么是CVE-2025-54100？ 类型： 当未 使用-UseBasicParsing时，Invoke-WebRequest中的命令注入 严重性： CVSS 7.8（高） 根因：...

thinkphp5.XRce

ThinkPHP5.0 漏洞检测脚本 根据@tdcoming 大佬的脚本改写了下 Introduction: 影响范围： v5.1.x 5.1.31 v5.0.x= 5.0.23 Usage: 1. pip install -r requirements.txt 2. 在本脚本目录下新建url.txt 3. 把要检测的URL放进去 4. 运行脚本 Screenshot:...

Codoforum 5.1 - Arbitrary File Upload

Codoforum 5.1 contains an arbitrary file upload vulnerability via the logo change option in the admin panel. An attacker can upload arbitrary files to the server, which in turn can be used to make the application execute file content as code. As a result, an attacker can potentially obtain...

Wordpress_CVE-2019-9787

WordpressCVE-2019-9787 尝试使用Docker通过自动安装WordPress来重现此问题 CVE-2019-9787 CSRF的PoC WordPress版本5.1及以下 要展示CVE-2019-9787的全部潜力，你可能需要一个比nginx/iframe-post.html中给出的注释更恶意的代码片段。在我的代码中，我没有利用WordPress中wpfilterpostkses的缺陷。 除测试目的外，请勿使用此代码。 使用bash安装： 克隆仓库： git clone...

CVE-2020-25790

CVE-2020-25790 Typesetter CMS File Upload Vulnerability Environment Pull Method docker pull mtwf/typesettercve-2020-25790:5.1 docker run -it -d -p 80:80 mtwf/typesettercve-2020-25790:5.1 /bin/bash -c "service apache2 start;/bin/bash" Typesetter account password is admin:admin Vulnerability...

CVE-2025-54100

CVE-2025-54100 – PowerShell 响应解析 PoC 演示 CVE-2025-54100 如何通过恶意 HTML 解析，在 Windows PowerShell 5.1 中导致 远程代码执行（RCE） 。 什么是 CVE-2025-54100？ 漏洞类型： 当 Invoke-WebRequest 未使用 -UseBasicParsing 参数时存在命令注入风险 严重等级： CVSS 7.8（高危） 根本原因： 基于 MSHTML 的 HTML 响应解析允许脚本执行（如 ActiveXObject），并在调用者上下文中运行 受影响系统： Windows 10 / 11...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel versions 5.1 through 5.19.x, prior to 5.19.16, could be exploited by local attackers those capable of injecting WLAN frames to trigger use-after-free conditions, potentially allowing them to execute...

CVE-2026-81917

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2026-81917 Concrete CMS below 9.5.3 is vulnerable to Stored XSS in the Document Library block file description and tags

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

EUVD-2026-76687

Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the posted form rather than the entity identified by the dashboard route. As a result, a user permitted to add entries to one Express object could create entries in a different Expres...

PT-2026-90498

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

Claude Fable Solves a Historical Cipher

Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what I wrote about AIs doing mathematics: It's good at things that involve lots of searching and testing. EDITED TO ADD 9/14: I'm not sure if this result is correct. The blog comments have more discussion...

PT-2026-81204

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81209

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81207

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

CVE-2026-73336

In Joomla! 5.1.0–5.4.7 and 6.0.0–6.1.2, improper escaping flags allow cross-site scripting (XSS) through schema.org markup outputs. CVSS 4.0 scores it MEDIUM (5.1), requiring high privileges. No exploitation details are provided. Affected users should update to patched versions as announced by Jo...

CLSA-2025-1760919102 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post2+tuxcare...

OPENSUSE-SU-2026:11435-1 gd-2.3.3-5.1 on GA media

These are all security issues fixed in the gd-2.3.3-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11344-1 GraphicsMagick-1.3.47-5.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.47-5.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57156

Dell PowerFlex Manager, Version prior to 5.1.0.1, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...