FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

FreeRDP: FreeRDP: Double-free vulnerability via crafted .rdp file leading to potential remote code execution

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A double-free vulnerability exists when a FreeRDP client processes a specially crafted .rdp connection file. An attacker could convince a victim to open a malicious .rdp file, leading to a size-controlled...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow

A heap-based buffer overflow in FreeRDP's cryptorsacommon allows an unauthenticated remote attacker to trigger a denial of service or potential remote code execution. By sending a crafted ciphertext during RDP Standard Security key establishment, the attacker can force a data write before the siz...

React2Shell_Rce-cve-2025-55182

React Server Components RCE – README Buona giornata , spero davvero che tutto sia fantastico dal tuo lato dello schermo! 😊✨ Descrizione Le versioni 19.0.0 , 19.1.0 , 19.1.1 e 19.2.0 di React Server Components, incluse react-server-dom-parcel, react-server-dom-turbopack e react-server-dom-webpack,...

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite

3. CVE-2026-9999 – Event-Injection in Serverless-Funktionen Path Traversal → Code-Überschreibung Überblick Eine Serverless-Plattform, die Objektspeicher-Events verarbeitet, bereinigt das Feld object.key nicht, sodass ein Angreifer den Quellcode der Funktion per Path Traversal überschreiben kann...

CVE-2026-14894

CVE-2026-14894 — RCE da Upload di File Non Autenticato in Super Forms Fuga del Nonce → Upload datauristring → Esecuzione di Codice Panoramica CVE-2026-14894 è una vulnerabilità di upload arbitrario di file di gravità critica CVSS 9.8 non autenticata nel plugin WordPress Super Forms – Drag & Drop...

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

CVE-2026-78211 4MOSAn Security Technology｜4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

Exploit for CVE-2026-31337

Patch: CVE-2026-31337 Vulnerability Details - CVE: CVE...

CVE-2021-21972

VMware vCenter Server RCE — CVE-2021-21972 Forschungslabor Autor: Niranjan Pokhrel Unabhängiges Forschungsprojekt, das eine kritische, öffentlich bekannt gemachte Schwachstelle im VMware vCenter Server in einem isolierten Heimlabor reproduziert und dokumentiert, um die Schwachstellenklasse, den...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ExploitDotNetDCOM

ExploitDotNetDCOM c James Forshaw 2014 Uno strumento per sfruttare .NET DCOM per EoP e RCE. È stato corretto nelle ultime versioni di .NET. Solo a scopo informativo. Tutto il codice è concesso in licenza GPLv3...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

SQL-Injection-and-RCE_CVE-2025-57819

FreePBX RCE PoC Não Autenticado Resumo As versões 15, 16 e 17 do FreePBX contêm uma vulnerabilidade de Execução Remota de Código RCE causada por sanitização insuficiente de dados fornecidos pelo usuário em endpoints. Um atacante não autenticado pode manipular o banco de dados e obter execução...

Deep-Reaver

Deep Reaver Deep Reaver è un potente toolkit di valutazione delle vulnerabilità e sfruttamento potenziato dall'IA, costruito in Python. Ispirato a strumenti come Nmap e Nessus, Deep Reaver è progettato per una scansione approfondita e modulare di applicazioni web e servizi. Caratteristiche Analis...