Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-elytron (UTSA-2026-031645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031645 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-031619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031619 advisory. Apache Log4j2 2.0-beta9 through 2.15.0 excluding security releases 2.12.2, 2.12.3, and 2.3.1 JNDI features used in configuration, log messages, and parameters do not...

CVE-2024-44849

CVE-2024-44849 Autor: Extencil [email protected] CVE-2024-44849 ist eine kritische RCE-Schwachstelle, die alle vorherigen Versionen bis zu Qualitor 8.24 betrifft. Qualitor Website Die Verwendung dieses Programms, um ein Unternehmen oder System ohne gegenseitiges Einverständnis anzugreifen od...

CVE-2025-7766

CVE-2025-7766 PoC शोषण CVE-2025-7766 में XML बाहरी इकाई XXE कमजोरी का शोषण करने के लिए PoC। फ़ाइल पढ़ने /etc/passwd और आउट-ऑफ-बैंड HTTP कॉलबैक का प्रदर्शन। लेखक : Byte Reaper CVE : CVE-2025-7766 कमजोरी : XML बाहरी इकाई XXE के माध्यम से दूरस्थ कोड निष्पादन CVE-2025-7766 में XXE का शोषण करने के लिए...

CVE-2024-4577

CVE-2024-4577 Exploit di Remote Code Execution per PHP CGI Autore: Byte Reaper CVE: CVE-2024-4577 Categoria: Web Exploitation Versioni target: PHP CGI 8.1, 8.2, 8.3 Windows MIT...

CVE-2022-46169

CVE-2022-46169 Questo repository contiene una Proof of Concept PoC per la CVE-2022-46169 - RCE non autenticata su Cacti = 1.2.22 concatenando un bypass dell'autenticazione e un'iniezione di comandi, descritta da Sonar in questo post del blog. Le stesse vulnerabilità sono state scoperte anche da:...

weblogic2021

Il presente progetto è destinato esclusivamente a scopi di ricerca sulla sicurezza e a utilizzi autorizzati; gli utilizzatori hanno la responsabilità e il dovere di rispettare le leggi e i regolamenti locali. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075,...

CVE-2025-1094-Exploit

CVE-2025-1094: SQL Injection a RCE tramite WebSocket 🚀 Questo repository contiene un exploit proof of concept PoC per CVE-2025-1094 , una vulnerabilità in PostgreSQL che consente a un attacco SQL Injection SQLi di escalare a Remote Code Execution RCE tramite dirottamento WebSocket. Panoramica...

CVE-2026-61800 Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

CVE-2026-61800 Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19315

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote, unauthenticated attacker to achieve arbitrary code execution by sending specially crafted network traffic. The vulnerability is rated CVSS 4.0 9.3 (CRITICAL) , reflecting a network attack vector with low...

CVE-2026-19315 Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19313

CVE-2026-19313 is a heap overflow vulnerability in the WatchGuard Fireware OS iked process that allows a remote unauthenticated attacker to achieve arbitrary code execution by sending specially crafted network traffic. The NVD-assigned CVSS 4.0 score is 9.3 (CRITICAL) , reflecting a low-complexit...

CVE-2026-19318 Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19313 Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-13086

CVE-2026-13086 affects the epm (Endpoint Protection Manager) service used by the deprecated Mobile Security feature in WatchGuard Fireware OS . The vulnerability is a stack-based buffer overflow that allows an unauthenticated remote attacker to execute arbitrary code, rated CVSS 4.0 9.3 (CRITICAL...

CVE-2026-19318

CVE-2026-19318 is a stack-based buffer overflow in the iked process of WatchGuard Fireware OS , allowing a remote unauthenticated attacker to achieve arbitrary code execution by sending specially crafted network traffic. The CVSS 4.0 score is 9.3 (CRITICAL) with low attack complexity, no privileg...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: strumento all-in-one per la vulnerabilità RCE da bypass del certificato client in 1Panel scansione + exploit Introduzione alla vulnerabilità 1Panel è un pannello di gestione operativa Linux open source e moderno che fornisce un'interfaccia grafica per distribuire si...

CVE-2023-50164-POC

Questo è un Proof of Concept PoC per CVE-2023-50164, che descrive una nuova vulnerabilità di path traversal che può portare a Remote Code Execution RCE in struts-core. Per risolvere il problema, si consiglia di aggiornare a Struts 2.5.33 o Struts 6.3.0.2 o versioni successive. Questo repository s...