python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

RLSA-2026:58562 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RCE-QloApps-CVE-2024-40318

RCE-QloApps-CVE-2024-40318 Um ataque de execução remota de código RCE permite que um atacante execute código em um computador. A capacidade de executar código pode levar à implantação de malware adicional, roubo de dados sensíveis ou até mesmo danificar o servidor. A execução remota de código foi...

cve-2023-51385

Verifica CVE-2023-51385 Per prima cosa, aggiungi il seguente contenuto al file /.ssh/config: root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Nelle dichiarazioni del file .gitmodules è presente un'iniezione di comandi: root@kitploit: url = ssh://echo...

HTB_Nibbles

HTBNibbles In questo repository troverai il report tecnico di Nibbles, l'exploit pwned.py per abusare della CVE-2015-6967 e uno strumento autopwn autopwn.py nel caso tu voglia risolvere la macchina in HackTheBox. Strumento Pwned.py: Questo file ti aiuterà a sfruttare la CVE-2015-6967. Se vuoi...

CVE-2024-9264

CVE-2024-9264 RCE autenticato in Grafana v11.0 tramite SQL Expressions - PoC Exploit CVE-2024-9264 - Grafana v11.0 Esecuzione di codice remoto autenticato RCE PoC Introduzione CVE-2024-9264 è una grave falla di esecuzione di codice remoto e inclusione di file locali introdotta nella funzionalità...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 Bedrohungsanalyse Microsoft MSDT Remote Code Execution Zero-Day — Untersuchung der aktiven Ausnutzung durch MUHAMMAD ZAWAR KHATTAK 🔗 Vollständigen Writeup ansehen → 🧪 Szenario An einem Freitagabend wurde das Team über eine neue RCE-Schwachstelle alarmiert, die aktiv in...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote-Code-Ausführung authentifiziert CVE-2025-5196 Wing FTP Server stellt eine administrative Lua-Skriptkonsole bereit, die über seine Weboberfläche zugänglich ist. Durch unzureichendes Sandboxing können authentifizierte Administratoren beliebigen Lua-Code ausführen...

threat-intel-cve-2024-3094

Report di Threat Intelligence: CVE-2024-3094 – Backdoor di XZ Utils Questo repository contiene un report di threat intelligence che analizza CVE-2024-3094 , una vulnerabilità backdoor di alto profilo scoperta nel tool di compressione xz-utils nel 2024. CVE-2024-3094 è un grave compromesso della...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Beschreibung Dieses Repository enthält einen Python-basierten Proof of Concept PoC für CVE-2024-28397, eine Sandbox-Escape-Schwachstelle im Js2Py-JavaScript-Interpreter für Python. Wenn die Zielanwendung nicht vertrauenswürdigen JS-Code über Js2Py auswertet, kann ein...

FiberBreak

FiberBreak Ausnutzungsframework für CVE-2025-55182 React2Shell – Kritische RCE-Sicherheitslücke in React Server Components. Übersicht CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Typ : Remote Code Execution RCE Betroffen : React 19.0.0-rc.0 bis 19.0.0, Next.js 15.0.0 bis 15.0.3 Entdeckt von : Lachla...

Peyara-FileUpload

एक्सप्लॉइट शीर्षक: Peyara रिमोट माउस v1.0.1 बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड दिनांक: 2025-01-06 एक्सप्लॉइट लेखक: tmrswrr सॉफ़्टवेयर लिंक: https://peyara-remote-mouse.vercel.app/ प्लेटफ़ॉर्म: विंडोज़ संस्करण: v1.0.1 परीक्षण किया गया: विंडोज़ 10 root@kitploit: USAGE : python3 combinedscript.py...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Modulo Translate Vulnerabilità di esecuzione di codice remoto...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC Questo è il codice exploit Proof-of-concept per tre vulnerabilità scoperte da Jonas Mattsson e Hugo van den Toorn presso i Ghost Labs di Outpost24. Queste vulnerabilità sono state scoperte nel componente web server su una macchina di controllo orario Pyrescom Termod4. Queste...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC-Heap-Überlauf → RCE PoC Proof-of-Concept für einen remote auslösbaren Heap-Pufferüberlauf im DNS-over-QUIC-Empfangspfad DoQ von Knot Resolver, der eine Remote-Codeausführung als der Dienstbenutzer knot-resolver ermöglicht. Komponente: kresd DoQ-Listener...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - RCE por Desserialização no Microsoft SharePoint Relatório de Cibersegurança no Estilo Consultant Relatório profissional de avaliação de vulnerabilidade para risco de desserialização no SharePoint, incluindo resumo executivo, impacto técnico, remediação e estratégia de mitigação. ...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidade Crítica na Cadeia de Suprimentos do Mecanismo de Atualização do NiceHash QuickMiner Author: Prince T Philip Role: Pesquisador de Segurança Independente Severity: CRÍTICA — CVSS 9.8 Impact: Execução Remota de Código / Comprometimento da Cadeia de Suprimentos Status:...

Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

🔍 Scanner RCE per Next.js - CVE-2025-55182 e CVE-2025-66478 Un potente e facile da usare scanner per rilevare vulnerabilità critiche RCE nelle applicazioni Next.js 🎯 Panoramica Uno scanner avanzato di vulnerabilità per rilevare CVE-2025-55182 e CVE-2025-66478 - vulnerabilità critiche di Esecuzion...