document-viewer-link-handler-security-assessment

CVE-2026-46529 - Atril Evince XReader PDF RCE über klickbare Links Cybersicherheitsbericht im Beraterstil Professioneller Schwachstellenbewertungsbericht zum Risiko der Linkbehandlung in Dokumentbetrachtern, einschließlich Auswirkungsanalyse, Behebung und Strategie zur Risikominderung. 📍...

AEMPWN

AEMPWN AEM Forms Scanner per CVE-2025-54253 e CVE-2025-54254 AEMPWN è uno scanner mirato per identificare vulnerabilità ad alto rischio di Adobe Experience Manager AEM Forms, con supporto per rilevamento sicuro, conferma out-of-band OOB cieca e flussi di lavoro di validazione proof-of-concept PoC...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Vollständiger Penetrationstest-Walkthrough und Writeup für die Maschine Codify auf Hack The Box. 📌 Maschineninfo Feld| Wert ---|--- Name| Codify Betriebssystem| Linux Schwierigkeitsgrad| Einfach Kernkonzepte| vm2 RCE CVE-2023-30547, SQLite-DB-Enumeration,...

WG-CVE-2026-1555-Linux

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝...

wordpress-rce-vapt-cve-2020-25213

Sfruttamento e Mitigazione RCE di WordPress CVE-2020-25213 📌 Panoramica del Progetto Questo progetto è stato sviluppato nell'ambito del modulo IE4012 – Offensive Hacking Tactics & Strategies. Dimostra l'intero ciclo di vita di un attacco informatico in un ambiente di laboratorio controllato, tra...

CVE-2026-55200

CVE-2026-55200 - Vulnerabilità critica di esecuzione di codice remoto in libssh2 Vulnerabilità critica di corruzione della memoria pre-autenticazione in libssh2 Panoramica...

mi-laboratorio-log4shell

🚀 Automatisiertes Log4Shell- CVE-2021-44228 Plug-and-Play-Labor Ein automatisiertes Sicherheitsforschungslabor mit einem einzigen Befehl, das dazu dient, die Log4Shell- CVE-2021-44228 Remote-Code-Execution-Schwachstelle RCE zu demonstrieren und zu auditieren. Dieses Projekt bündelt alle...

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Ricerca sullo Sfruttamento Riproduzione controllata di CVE-2017-0144 — la vulnerabilità SMB dietro l'epidemia del ransomware WannaCry ⚠️ Disclaimer: Questa ricerca è stata condotta in un ambiente di laboratorio completamente isolato e controllato, esclusivamente per scopi...

wongpress

Exploração Real de Vulnerabilidades de Buffer Overflow e Format String para Obter RCE em Servidor Ubuntu CVEs Relacionados CVE-2024-2961 : Vulnerabilidade de buffer overflow na função iconv do Glibc CVE-2024-29510 : Vulnerabilidade de format string no Ghostscript interpretador da linguagem...

cve-2025-66478_rce_vulnerable

Blog Moderno com shadcn/ui Um blog moderno e elegante construído com Next.js 16, React 19, shadcn/ui e Tailwind CSS. IMPORTANTE: Projeto de Next JS VULNERÁVEL criado apenas para fins educativos, de testes e exploração, NÃO SE RECOMENDA INSTALAÇÃO EM PRODUÇÃO, APENAS PARA ÂMBITO LOCAL OU AMBIENTE...

BIT-VALKEY-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

react-vuln-scanner

Scanner per la vulnerabilità React CVE-2025-55182 Uno script bash per scansionare il tuo server alla ricerca di applicazioni React vulnerabili a CVE-2025-55182 — una vulnerabilità critica di esecuzione remota di codice CVSS 10.0 in React Server Components. ⚠️ Sulla vulnerabilità Il 3 dicembre 2025...

Open Web Analytics 1.7.3 - Remote Code Execution

Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

Microsoft SharePoint Server - Remote Code Execution (ToolShell)

Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. This vulnerability is part of the ToolShell exploit chain and when combined with CVE-2025-53771 authentication bypass, enables unauthenticated remote code...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 RCE non autenticata iniezione di variabili d'ambiente MCP stdio Esecuzione remota di codice non autenticata in Langflow OSS fino alla 1.10.1. La blocklist delle variabili d'ambiente che protegge la configurazione dei server MCP stdio DANGEROUSENVVARS omette...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

FreeRDP: FreeRDP: Double-free vulnerability via crafted .rdp file leading to potential remote code execution

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A double-free vulnerability exists when a FreeRDP client processes a specially crafted .rdp connection file. An attacker could convince a victim to open a malicious .rdp file, leading to a size-controlled...