CVE-2024-37054-PoC

Description Proof of concept for CVE-2024-37054, a critical deserialization vulnerability in MLflow versions 0.9.0 to 2.14.1. When a malicious pyfunc model is loaded via mlflow.pyfunc.loadmodel, the pickled payload executes arbitrary code. Files exploit.py — full exploit: register, train, upload,...

CVE-2021-40870

CVE-2021-40870 Aviatrix에서 위험한 유형의 파일을 제한 없이 업로드할 수 있어 인증된 사용자가 임의 코드를 실행할 수 있습니다 https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

csv-plus_vulnerability

csv-plusvulnerability 👻 2-클릭 임의 코드 실행 취약점. CVE-2022-21241 ⚠ 이 PoC는 사용자에게 경고하고 자신의 CSV+에서 취약점을 조사하기 위해 만들어졌으며, 공격에 사용되는 것을 금지합니다. 취약점 다음 버전이 취약합니다. CSV+ click me 👻 https://electronooooo.htmlbin.net/xsscalc.html는 임시 링크입니다. 악성 HTML 파일 calc var cmd = "calc"; require"childprocess".execcmd; Hi :...

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

CVE-2026-87683

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...

EUVD-2026-94657

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...

CVE-2026-87683

Brocade Fabric OS versions prior to 10.0.1 are susceptible to multiple stack-based buffer overflow vulnerabilities within the REST API management component . The root cause is a failure to properly validate incoming array counts and string lengths against internal buffer capacities when processin...

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

EUVD-2026-94653

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

EUVD-2026-94646

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contains an SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title. Vulnerable versions are v5.0.0 test % set form = freeform.form'pentest' % % if form % form.render % else % Form not foun...

PT-2026-107788

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly...

PT-2026-107724

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

PT-2026-107769

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...

PT-2026-107868

Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...

PT-2026-108017

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads in maybe unwrap pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG U...

PT-2026-107855

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

PT-2026-107776

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

RpcProxyInvoke

RpcProxyInvoke 개요 로컬 및 원격 코드를 실행하는 일반적인 방법을 만들기 위해, 우리는 내부적으로 RpcCraft자체 및 RpcExec원격 프로세스라고 부르는 비교적 난해한 코드 실행 방법을 설계했습니다. 이 기법은 익스플로잇 개발자들 사이에서 잘 알려진 방법론을 활용하며, RPC원격 프로시저 호출 서버 호출예: NdrServerCall2 또는 NdrServerCallAll을 남용하여 임의 코드를 실행합니다. 실행을 위한 서버 호출 남용 RPCRT4.dll 내에서 NdrServerCall2,...

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-78401 DESCRIPTION: IBM Verify Identity Access could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the...