CVE-2026-92867

A flaw was found in Pgpool-II. An out-of-bounds write vulnerability allows an authenticated remote attacker to corrupt memory. This issue may enable the attacker to achieve arbitrary code execution or trigger an abnormal process crash, resulting in a denial of service DoS. Mitigation Disable the...

CVE-2026-12540 Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetchlog task. The requestid parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...

EUVD-2026-90916

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetchlog task. The requestid parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...

CVE-2026-12540

A command injection vulnerability exists in the Foreman software within the foreman-rake errors:fetch_log task. The flaw is caused by the request_id parameter being passed to an underlying system command (typically grep ) without sufficient shell neutralization. An attacker with sudo permissions ...

CVE-2026-12540

A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetchlog task. The requestid parameter is passed to an underlying system command typically grep without adequate shell neutralization. While the task is intended to fetch specific log entries, an...

EUVD-2026-90902

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CVE-2026-63292

A stack-based buffer overflow exists in mod_vhost_alias within the Apache Software Foundation Apache HTTP Server (versions through 2.4.68). An attacker can trigger this by sending an HTTP request with a Host header exceeding 8192 bytes, provided that VirtualDocumentRoot uses a hostname format spe...

vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape

Summary On Node.js 24 and newer, vm2 can expose the host node:test module to sandboxed NodeVM code when the embedder explicitly allows the node:test builtin. Sandbox code can reach that module through require'node:node:test' and call run with attacker-controlled execArgv. node:test.run starts a...

vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts

Summary The vm2 command-line tool installed by npm install -g vm2 and documented in the README's "CLI" section runs the supplied script under NodeVM with require:external:true and no root / context / builtin configured. With these defaults the resolver loads every relative or absolute require...

CVE-2022-22963

CVE-2022-22963-Reverse-Shell-Exploit 这是一个利用 CVE-2022-22963 的 Python 脚本。CVE-2022-22963 是 Spring Cloud Function 中的一个远程代码执行漏洞，攻击者可在易受攻击的服务器上执行任意代码。该漏洞利用存在漏洞的 /functionRouter 端点，在目标服务器上执行命令。 用法 运行以下命令安装所需的 Python 库： pip3 install requests chmod +x springexploit.py 通过 -u 或 --url 选项提供目标 URL 来运行脚本：...

CVE-2024-55182

CVE-2025-55182 React2Shell 漏洞 1. 漏洞说明： CVE-2025-55182（“React2Shell”） 是 React Server Components RSC 中的一个严重远程代码执行 RCE 漏洞——具体存在于 React Flight 协议的反序列化逻辑 中。 影响范围： React 的服务端引擎错误地解析来自浏览器的数据 。 攻击者可以向你的服务器发送一个特制的 HTTP 请求。 该请求欺骗 React 的服务器运行时执行任意服务端 JavaScript 。 这使得攻击者能够： 在你的服务器上运行命令 窃取环境变量（API...

Critical: Red Hat Security Advisory: Satellite 6.19.5 Async Update

A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

EUVD-2026-90854

Editor PHP Object Injection in Hide Shipping Method For WooCommerce = 1.5.4 versions...

CVE-2024-28715

CVE-2024-28715 CVE 编号 CVE-2024-28715 产品 DoraCMS 版本 DoraCMS v2.18 及更早版本 问题类型 基于DOM的XSS 描述 DOraCMS v.2.18 及更早版本中存在跨站脚本漏洞，允许远程攻击者通过 /app/public/apidoc/oas3/wrap-components/markdown.jsx 端点中的 markdown0 函数执行任意代码。 使用方式 https://target-site/static/apidoc/index.html?url=https://your-site/POC.yaml...

CVE-2024-46538

感谢physicszq 发现此漏洞。 CVE-2024-46538 ★ CVE-2024-46538 PfSense 存储型 XSS 导致任意代码执行 PoC ★ 描述 CVE-2024-46538 : PfSense 存储型 XSS 漏洞 描述：pfsense v2.5.2 中存在一个跨站脚本（XSS）漏洞，攻击者可通过在 interfacesgroupsedit.php 的 $pconfig 变量中注入特制载荷来执行任意 Web 脚本或 HTML。 实验环境搭建 下载存在漏洞的版本（v2.5.2）： 分析...

CVE-2025-4322-Exploit

CVE-2025-4322 - 未经验证的密码更改 CWE-620 漏洞利用： 在此下载 详情 CVE ID : CVE-2025-4322 发布日期 : 05/20/2025 影响 : 严重 CVSS : 9.8 补丁可用 :（尚无官方补丁） 影响 严重级别的漏洞，使攻击者能够： - 绕过浏览器的沙盒保护 - 执行任意代码 - 破坏系统完整性 - 未经授权访问系统资源 该漏洞专门针对 Windows 上的 Firefox，且已在野外被积极利用。 联系方式 如需咨询，请联系: [email protected]...

CVE-2025-55182-React2Shell-RCE

CVE-2025-55182 - React2Shell Unauthenticated RCE in React Server Components CVE-2025-55182, also known as React2Shell , is a critical unauthenticated Remote Code Execution RCE vulnerability affecting React Server Components packages versions 19.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability ma...

CVE-2023-25136

CVE-2023-25136 Escaneo masivo y explotación de la vulnerabilidad OpenSSH 9.1 Detalles de la vulnerabilidad OpenSSH es un software que implementa el protocolo SSH, comúnmente utilizado para conectarse de forma segura a máquinas Linux o Windows para realizar administración remota. La vulnerabilidad...

clone_and_pwn

Encabezados Título del Exploit: Clone and Pwn Fecha: 4 de junio de 2018 Autor del Exploit: Alejandro Caceres Página del proveedor: https://git-scm.com/ Enlace del software: https://git-scm.com/downloads Versión: se ejecuta código arbitrario en versiones del cliente git anteriores a 2.13.7, 2.14.x...

CVE-2025-55349

CVE-2025-55349 — pm2 通过 postinstall 的任意代码执行 发现者 : Golden Ticket Labs 供应商 : Unitech pm2 分配日期 : 2025年8月20日 MITRE 描述 Unitech PM2 v5.4.2 中 lib/API/Modules/NPM.js 组件的一个问题允许通过安装带有精心构造的 postinstall 脚本的包来执行任意代码。 PM2 在从基于 Git 或本地文件安装中调用时，会自动运行 postinstall 生命周期脚本，而无需沙箱或用户确认，包括通过以下方式调用时：...