CVE-2026-78315

Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows an attacker to achieve remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with a network attack vector, low attack complexity, and low privileges required. CISA's SSVC assessment indicates no known...

CVE-2026-78315 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64760

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78314 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64759

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78314

Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows a remote attacker with low privileges to achieve remote code execution . The attack requires no user interaction, has low complexity, and is exploitable over the network. The NVD-assigned CVSS 3.1 score is 8.8 ...

mvn_pwn

MVN PWN Pom.xml Maven dannoso che utilizza "groovy-maven-plugin" per ottenere RCE Il payload completo con le dipendenze può essere trovato nel seguente blog: https://security.humanativaspa.it/abusing-mavens-pom-xml/...

CVE-2026-56291

Versione di scansione automatica ed Exploit CVE-2026-56291 POC Joomla Upload arbitrario di file non autenticato che porta a RCE in Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...

K000163051: libssh2 vulnerability CVE-2026-55200

Security Advisory Description libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

React2Shell-Kingdom

Progetto di dimostrazione della vulnerabilità React CVE-2025-55182 ⚠️ AVVISO DI SICUREZZA Questo progetto dimostra una vulnerabilità critica di RCE CVE-2025-55182 / React2Shell in React Server Components 19.1.1. SOLO PER SCOPI EDUCATIVI E DI RICERCA SULLA SICUREZZA NON distribuire MAI in produzion...

Geutebrueck_GCore_X64_RCE_BO

GeutebrueckGCoreX64RCEBO Modulo Metasploit per il sistema "video management" Geutebrueck GCore. Testato con le versioni 1.3.8.42 e 1.4.2.37. Esecuzione remota completa di codice con privilegi NT/System su Windows Win 2012R2, Win8.1, ... con i prodotti Geutebrueck installati GCore. Autori:...

Magneto-PolyShell

Magento 2 RCE Exploit - Unauthentifizierter Datei-Upload zu RCE ⚠️ Dieses Tool dient ausschließlich zu Bildungs- und autorisierten Sicherheitstests. Unbefugte Nutzung gegen Systeme, die Ihnen nicht gehören, ist illegal. Dieses Exploit zielt auf eine kritische Schwachstelle für nicht...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Vollständiger Penetrationstest-Walkthrough und Writeup für die Maschine Codify auf Hack The Box. 📌 Maschineninfo Feld| Wert ---|--- Name| Codify Betriebssystem| Linux Schwierigkeitsgrad| Einfach Kernkonzepte| vm2 RCE CVE-2023-30547, SQLite-DB-Enumeration,...

BIT-VALKEY-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

BIT-VALKEY-2026-56684 Valkey: TLS pending-data processing use-after-free may allow remote code execution

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendinglist while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a...

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...