CVE-2026-45806

CVE-2026-45806 استيراد الصور عن بُعد في Penpot سمح لمحرر ملفات مصادق بتحويل ميزة وسائط عادية إلى SSRF من أصل الخادم الخلفي لأن عناوين URL التي يتحكم بها المهاجم عبرت إلى مسار جلب خادم يتبع إعادة التوجيه دون تصفية الوجهة. مقدمة اكتشفت هذه المشكلة أثناء مراجعة Penpot ، منصة التعاون في التصميم والكو...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 is susceptible to remote code execution. An authenticated user authorized to import projects can import a maliciously crafted project, thus possibly being able to execute malware, obtain sensitive information, modi...

CVE-2026-49952

installation root@kitploit: pip3 install Pillow torch torchvision exécution root@kitploit: $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX |...

CVE-2026-48907

CVE-2026-48907 PoC éducatif ⚠️ Ce dépôt est destiné uniquement à des fins éducatives et de sécurité défensive. Testez uniquement sur des systèmes que vous possédez ou pour lesquels vous avez une autorisation explicite. N'utilisez pas ce projet contre des systèmes tiers. Ce PoC démontre la...

PT-2026-83990

Name of the Vulnerable Software and Affected Versions Wallos versions prior to 4.9.4 Description An authentication bypass exists in the 'endpoints/db/import.php' endpoint. On fresh or unconfigured installations where the user table row count is zero, an unauthenticated attacker can replace the...

CVE-2026-51727

Incorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to retrieve administrative import and export endpoint information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Cartero

Cartero Cartero est désormais un CLI Go avec une base de données d'espace de travail intégrée et sans configuration, remplaçant l'ancien runtime dépendant de MongoDB. L'implémentation actuelle fournit : une expérience terminale soignée propulsée par Cobra et Lip Gloss une interface web...

unlicense

Unlicense Un outil Python 3 pour dépaqueter dynamiquement les exécutables protégés avec Themida/WinLicense 2.x et 3.x. Avertissement : cet outil exécutera l'exécutable cible. Assurez-vous d'utiliser cet outil dans une machine virtuelle si vous n'êtes pas sûr de ce que fait l'exécutable cible...

LogFileParser

Features Decode and dump $LogFile records and transaction entries. Decode NTFS attribute changes. Optionally resolve all datarun list information available in $LogFile. Option: "Reconstruct data runs". Recover transactions from slack space within $LogFile. Choose to reconstruct missing or damaged...

CVE-2023-36123

CVE-2023-36123 Solo a scopo dimostrativo. L'exploit funziona su tutte le versioni di Plain Craft Launcher 2. Scarica Custom.xaml e importalo in Plain Craft Launcher 2, quindi fai clic su "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

CVE-2026-82450

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissions to upload a PHP polyglot file as a book cover. Attackers can bypass image extension validation by embedding a PHP fil...

CVE-2026-82450 BookStack before 26.05.4 Remote Code Execution via Book Cover

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissions to upload a PHP polyglot file as a book cover. Attackers can bypass image extension validation by embedding a PHP fil...

EUVD-2026-68105

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissions to upload a PHP polyglot file as a book cover. Attackers can bypass image extension validation by embedding a PHP fil...

CVE-2026-82450

BookStack before version 26.05.4 is affected by a remote code execution vulnerability in the portable ZIP import functionality. A user with Import Content and Create Books permissions can upload a PHP polyglot file disguised as a book cover. The attacker bypasses image extension validation by emb...

CVE-2026-82450 BookStack before 26.05.4 Remote Code Execution via Book Cover

BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books permissions to upload a PHP polyglot file as a book cover. Attackers can bypass image extension validation by embedding a PHP fil...

CVE-2025-31125

Exploit CVE-2025-31125 - Path Traversal de Importação WASM no Vite 🛡️ Este script é um exploit prova de conceito PoC para CVE-2025-31125 , uma vulnerabilidade encontrada no Vite. O exploit utiliza um problema de Path Traversal de Importação WASM para recuperar arquivos confidenciais de servidores...

CVE-2026-33137

CVE-2026-33137 XWiki Platform – Nicht authentifizierter XAR-Import via REST/wikis/wikiName Beschreibung Der REST-API-Endpunkt POST /wikis/wikiName in der XWiki-Plattform führt einen XAR-Import XWiki-Archiv durch, ohne dabei eine Authentifizierungs- oder Autorisierungsprüfung vorzunehmen. Ein nich...

CVE-2026-76547

The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege users such as administrators to conduct PHP Object Injection. The affected feature is a free add-on which is disabled by defaul...

CVE-2026-80488 WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import Fields

The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

CVE-2026-80488

WP Ultimate CSV Importer WordPress plugin versions before 9.0 contain a SQL injection vulnerability in the AIOSEO Import Fields feature. Imported field values are not properly sanitised or escaped before being used in a SQL statement, allowing high-privilege users (admin and above) to execute arb...