CVE-2019-16724

漏洞描述 File Sharing Wizard 1.5.0 允许远程攻击者通过利用HTTP POST参数中基于结构化异常处理程序（SEH）的缓冲区溢出，实现任意代码执行。 此漏洞利用已在Windows 7 Home上测试。在其他平台上肯定会失效。主要用于研究目的。...

CVE-2026-11728

This vulnerability affects the IBM MQ .NET client 's asynchronous message receive handler, where a heap buffer overflow (CWE-787) can allow a remote attacker to cause a denial of service or potentially execute arbitrary code. The attack requires a malicious queue manager or a man-in-the-middle po...

CVE-2026-12351

IBM MQ versions 9.3.0.0–9.3.0.41 LTS, 9.3.0.0–9.3.5.1 CD, 9.4.0.0–9.4.0.25 LTS, 9.4.0.0–9.4.5.1 LTS, and 10.0.0.0 are vulnerable to unauthenticated remote code execution via JNDI injection in the Jakarta Resource Adapter IVT servlet . The root cause is unsafe JNDI lookup processing (CWE-74). When...

EUVD-2026-78871

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authenticated attacker to execute arbitrary code due to a deserialization of untrusted...

CVE-2026-21587

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

CVE-2026-21586

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an...

CVE-2026-21587

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to gain unintended access and can lead to the exposure of resource...

CVE-2024-48990-PoC

针对 CVE-2024-48990 在 needrestart 中的 PoC 仅用于教育目的 https://www.qualys.com/2024/11/19/needrestart/needrestart.txt 如何运行？ 运行 ./start.sh 将编译伪造的 importlib 库，并启动一个脚本等待 root 用户执行 needrestart。之后将弹出一个 shell。...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 命令注入 CVE-2022-46169 漏洞应用 这是一个用于测试 Cacti 漏洞（CVE-2022-46169 ）利用的易受攻击应用。 警告！ 此应用包含严重的安全漏洞。运行风险自负！建议在备份且隔离的环境（如已创建近期快照并仅使用主机网络模式的虚拟机）中运行。请勿将此应用部署到任何面向互联网的服务器，否则它们将被攻破。 免责声明 ：本人对任何人使用此应用的方式概不负责。此应用的唯一用途是作为 CVE-2022-46169 漏洞利用的测试场景，不得恶意使用。如果您的服务器因安装此应用而被攻破，责任不在于我，而在于上传并安装它的人员。 漏洞信息 CVE-ID...

CVE-2022-1388

F5-CVE-2022-1388-Exploit CVE 2022-1388 的利用和检查脚本 使用方法 root@kitploit: / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / / / / //...

CVE-2025-60751

CVE-2025-60751 PoC para CVE-2025-60751 Producto afectado: Geographiclib = v2.5.1 El artículo completo está disponible en https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html Descripción Se produce un desbordamiento de búfer en la pila cuando GeoConvert recibe una entrada...

CVE-2026-88616

An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components...

CVE-2026-57586

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-57586

CodeRAG (agent-coderag) prior to 1.3.1 contains an Arbitrary Code Execution vulnerability in its default sync flow. When a victim indexes a directory containing build.gradle or build.gradle.kts, the tool unconditionally prefers a repository-controlled gradlew wrapper and executes it via asyncio.c...

CVE-2026-57586 CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

EUVD-2026-78583

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-57586 CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-57586 CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in coderag/entry/cli.py calls syncdependencies for an indexed path, and coderag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to...

CVE-2026-26719

描述 摘要 xxl-job-admin 中的 JobInfoController.java 存在一个存储型跨站脚本（XSS）漏洞，其中 addressList 参数接受未经消毒的 URL 编码 JavaScript。该载荷被存储后，会在用户浏览器中执行，导致未授权操作。 受影响产品 root@kitploit: xxl-job 3.4.0 影响 xxl-job-admin v3.4.0 中的跨站脚本漏洞允许远程攻击者通过包含恶意脚本的精心构造的 HTTP GET 请求执行任意代码。 概念验证...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub 漏洞（CVE-2026-36027, CVE-2026-36028） Code 27 3D Companion Hub 是一款实体桌面设备，可渲染定制的 AI 角色（"Codie"）作为动画化的 3D 伴侣。用户可以上传或创建任意 3D 模型，多模态 AI 使角色能够观察周围环境、读取语气和肢体语言，并进行开放式对话。 本文涉及两个需要物理接触设备的漏洞。两者均在以下构建版本上验证，且在发布时尚未修补。 受影响设备 / 构建版本 字段| 值 ---|--- 产品| Code 27 3D Companion Hub Companion Hu...