CVE-2026-48908-Joomla-SP-Page-Builder-RCE

🛡️ Analisi di CVE-2026-48908 Caricamento Arbitrario di File non Autenticato verso RCE in JoomShaper SP Page Builder -critical?style=for-the-badge&logo=alert -black?style=for-the-badge&logo=github Una completa analisi tecnica di una vulnerabilità di esecuzione remota di codice non autenticata. 📌...

CVE-2025-49132

Impatto Utilizzando il file /locales/locale.json con i parametri di query locale e namespace, un attore malintenzionato è in grado di eseguire codice arbitrario, senza essere autenticato. Con la possibilità di eseguire codice arbitrario, questa vulnerabilità può essere sfruttata in un numero...

CVE-2025-47812-poc

CVE-2025-47812 Exploit di Remote Code Execution RCE per Wing FTP Server CVE-2025-47812 📌 Crediti : Vulnerabilità scoperta da Julien @MrTuxracer. Questa implementazione del PoC si basa sulla loro ricerca originale. Questo repository contiene un exploit Python per la vulnerabilità di Remote Code...

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

रिमोट कोड एक्ज़ीक्यूशन – CVE-2024-28397 pyload-ng / js2py इस रिपॉज़िटरी में CVE-2024-28397 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट है, जो pyload-ng को प्रभावित करने वाली एक रिमोट कोड एक्ज़ीक्यूशन भेद्यता है, जो js2py के असुरक्षित उपयोग के कारण होती है। अस्वीकरण: यह PoC केवल शैक्षिक और शोध...

wp2shell-Wordpress-TOWN

wp2shell di : lucifer0xf Esecuzione remota di codice non autenticata per il POC del core di WordPress CVE-2026-63030 + CVE-2026-60137 wp2shell exploit per la catena di vulnerabilità critiche nel core di WordPress. Combina un bug di confusione delle route batch dell'API REST con un'iniezione SQL i...

RLSA-2026:58561 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

RLSA-2026:58562 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 Um ataque de execução remota de código RCE permite que um atacante execute código em um computador. A capacidade de executar código pode levar à implantação de malware adicional, roubo de dados sensíveis ou até mesmo danificar o servidor. A execução remota de código foi...

HTB_Nibbles

HTBNibbles In questo repository troverai il report tecnico di Nibbles, l'exploit pwned.py per abusare della CVE-2015-6967 e uno strumento autopwn autopwn.py nel caso tu voglia risolvere la macchina in HackTheBox. Strumento Pwned.py: Questo file ti aiuterà a sfruttare la CVE-2015-6967. Se vuoi...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 Bedrohungsanalyse Microsoft MSDT Remote Code Execution Zero-Day — Untersuchung der aktiven Ausnutzung durch MUHAMMAD ZAWAR KHATTAK 🔗 Vollständigen Writeup ansehen → 🧪 Szenario An einem Freitagabend wurde das Team über eine neue RCE-Schwachstelle alarmiert, die aktiv in...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote-Code-Ausführung authentifiziert CVE-2025-5196 Wing FTP Server stellt eine administrative Lua-Skriptkonsole bereit, die über seine Weboberfläche zugänglich ist. Durch unzureichendes Sandboxing können authentifizierte Administratoren beliebigen Lua-Code ausführen...

threat-intel-cve-2024-3094

Report di Threat Intelligence: CVE-2024-3094 – Backdoor di XZ Utils Questo repository contiene un report di threat intelligence che analizza CVE-2024-3094 , una vulnerabilità backdoor di alto profilo scoperta nel tool di compressione xz-utils nel 2024. CVE-2024-3094 è un grave compromesso della...

Peyara-FileUpload

एक्सप्लॉइट शीर्षक: Peyara रिमोट माउस v1.0.1 बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड दिनांक: 2025-01-06 एक्सप्लॉइट लेखक: tmrswrr सॉफ़्टवेयर लिंक: https://peyara-remote-mouse.vercel.app/ प्लेटफ़ॉर्म: विंडोज़ संस्करण: v1.0.1 परीक्षण किया गया: विंडोज़ 10 root@kitploit: USAGE : python3 combinedscript.py...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC Questo è il codice exploit Proof-of-concept per tre vulnerabilità scoperte da Jonas Mattsson e Hugo van den Toorn presso i Ghost Labs di Outpost24. Queste vulnerabilità sono state scoperte nel componente web server su una macchina di controllo orario Pyrescom Termod4. Queste...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC-Heap-Überlauf → RCE PoC Proof-of-Concept für einen remote auslösbaren Heap-Pufferüberlauf im DNS-over-QUIC-Empfangspfad DoQ von Knot Resolver, der eine Remote-Codeausführung als der Dienstbenutzer knot-resolver ermöglicht. Komponente: kresd DoQ-Listener...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - RCE por Desserialização no Microsoft SharePoint Relatório de Cibersegurança no Estilo Consultant Relatório profissional de avaliação de vulnerabilidade para risco de desserialização no SharePoint, incluindo resumo executivo, impacto técnico, remediação e estratégia de mitigação. ...