CVE-2026-19477

A stack-based buffer overflow was identified in MCC Universal Library for Linux (uldaq) , a library used for MCC data acquisition on Linux, affecting version 1.2.1 and prior . The flaw can lead to information disclosure or arbitrary code execution with a local attack vector, low complexity, and n...

CVE-2024-44346

CVE 披露：CVE-2024-44346 日期： 13-09-2024 摘要 在 Tosibox tbsetup.exe 4.0.0.0 版本中发现了一个漏洞，该漏洞可能允许本地权限提升。此问题已被分配标识符 CVE-2024-44346 。供应商已发布公告，提供了更多详情和修复步骤。 受影响的产品 供应商 ：Tosibox 产品 ：tbsetup.exe 版本 ：4.0.0.0 漏洞描述 Tosibox 被告知 Tosibox Key 软件中存在一个问题，该问题可能允许在运行 Tosibox Key 安装程序 tbsetup.exe...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 XSS Almacenado Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-Site Scripting XSS en la instalación de PluckCMS v.4.7.18 permiten a un atacante local ejecutar código arbitrario mediante un payload manipulado inyectado en los parámetros cont1 y cont2 durante el...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

CVE-2026-0303

Ejecución de Código Arbitrario en Checkov CVE-2026-0303 CVE: CVE-2026-0303 | CVSS Base: 6.3 | Severidad: Baja CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Vulnerabilidad de ejecución de código arbitrario en Checkov. Publicado por Palo Alto Networks el 9 de...

obsidian-note-toolbar-PoC

Ejecución de Código Arbitrario Dirigida por Frontmatter en Note Toolbar mediante la Cadena de Variables propNAME → js: Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-q8cw-3m8c-5pf2. Tras la asignación del CVE, este repositorio se renombra a...

CVE-2026-92944

vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 (V8 14.6). The root cause is a stale PromiseThenLookupChain protector: Promise.prototype.finally() bypasses vm2's wrapper protections. An attacker can exploit this by creating an async function that returns a ...

CVE-2026-92944 vm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector

vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.finally bypasses vm2's wrapper protections due to a stale PromiseThenLookupChain protector in V8 14.6. Attackers can exploit this by creating an async function that returns a Promise wi...

CVE-2025-65754

CVE-2025-65754：Algernon 1.17.4 中的存储型 XSS 描述 Algernon v1.17.4 存在跨站脚本（XSS）漏洞，攻击者可通过精心构造的文件名有效载荷执行任意代码。 受影响项目：Algernon - 1.17.4 项目维护者：Alexander F. Rødseth xyproto 漏洞类型：跨站脚本（XSS） 攻击向量：攻击者可上传包含恶意名称的文件，以更改网站内容或窃取 Cookie 劫持会话。 部分变量未进行清理。 例如： engine/dirhandler.go 第 80-108 行 root@kitploit: filename :=...

CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerabilidad 1. Explicación sobre la Vulnerabilidad: CVE-2025-55182 “React2Shell” es una vulnerabilidad crítica de Ejecución Remota de Código RCE dentro de React Server Components RSC — específicamente en la lógica de deserialización del protocolo React Flight. Afecta...

valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

libevent security update

An update is available for libevent. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libevent packages provide an abstract asynchronous event notification...

CVE-2024-4367-hands-on-01

!IMPORTANT This repository is for learning about vulnerabilities. Perform this hands-on only on an appropriate computer that you manage. Never engage in illegal activities. The author accepts no responsibility or liability for any damage arising from this repository. CVE-2024-4367-hands-on A...

ROOT-APP-NPM-GHSA-5P4M-2WFM-XMQJ GHSA-5p4m-2wfm-xmqj in js-yaml - Patched by Root

Root has patched GHSA-5p4m-2wfm-xmqj in the js-yaml package for Root:npm. Multiple fixed versions available...

CVE-2025-69599

CVE-2025-69599 作者: Rafael José Núñez Gulías 公司: Iberian Var Group 受影响产品: RayVentory Scan Engine 12.6 Update 8 及更早版本 Raynet 安全公告: RSEC200965 Raynet 中的 rvia 存在一个 不受控制的搜索路径元素 问题。在加载共享对象和调用系统二进制文件（例如 .so 和辅助二进制文件）时，它们都使用相对路径进行调用，这使得用户可以通过 PATH 环境变量操作来篡改最终执行的二进制文件或 .so 对象。 在以下证据中，在 /tmp 目录下创建了一个名为 cur...

RLSA-2026:67910 Important: libevent security update

The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...

CVE-2026-48778-PoC

CVE-2026-48778 — PoC de Ejecución de Código Arbitrario en Notepad++ Gravedad: Alta CVSS 7.8 | Afectado: Notepad++ ≤ 8.9.6 | Parcheado: v8.9.6.1 Un script PoC para CVE-2026-48778, una vulnerabilidad de ejecución de código arbitrario en Notepad++ ≤ 8.9.6. Para detalles técnicos completos, consulte ...

CVE-2026-48800-PoC

CVE-2026-48800 — PoC de Ejecución de Código Arbitrario en Notepad++ Gravedad: Alta | Afectado: Notepad++ ≤ 8.9.6 | Parcheado: v8.9.6.1 Un script PoC para CVE-2026-48800, una vulnerabilidad de ejecución de código arbitrario en Notepad++ ≤ 8.9.6 a través de shortcuts.xml. Para detalles técnicos...

CVE-2026-18718

Advisory: GHSA-pcfh-853f-q3gh · Severity: High CVSS 7.5 · Affected: Ghidra ≤ 12.1.2 · Fixed: c03a70d Ghidra 12.1.3 Opening someone else's Ghidra project was enough to execute their code. Ghidra 12.1.2 stores analyzer options inside the program database , and one of those options is a filesystem...

Atlassian Bitbucket - Remote Command Injection

Atlassian Bitbucket Server and Data Center is susceptible to remote command injection. Multiple API endpoints can allow an attacker with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request, thus making it possible to obtain...