CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape

CVE-2026-1337 – حقن التلقين في مساعد البرمجة الذكي المؤدي إلى تنفيذ الأوامر عن بُعد RCE 📖 نظرة عامة تتيح ثغرة حقن التلقين Prompt Injection في روبوت مراجعة الكود المدعوم بالذكاء الاصطناعي للمهاجم حقن أوامر شل تعسفية عبر التلاعب باقتراح «الإصلاح» الخاص بالروبوت. يستخدم المُنقّي قائمة سوداء بسيطة يم...

CVE-2026-3854-lab

Flagship Lab 001: Dalle opzioni di push di Git alla RCE Un Learning Lab e un Research Lab locali ispirati ai concetti di vulnerabilità pubblicamente documentati alla base di CVE-2026-3854. Entrambe le esperienze utilizzano push Git reali autenticati verso ForgeDock, un server Git fittizio; il...

cve-2025-53770

CVE-2025-53770 PoC di Deserializzazione RCE di SharePoint Critico — Esecuzione remota di codice non autenticata tramite deserializzazione non sicura in Microsoft SharePoint Server CVE-2025-53770 Descrizione La deserializzazione di dati non attendibili in Microsoft SharePoint Server on-premises...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

CVE-2024-28397-RCE

CVE-2024-28397-RCE CVE-2024-28397 - Esecuzione remota di codice da JS2PY vulnerabile Uso: python3 exploit.py...

CVE-2026-78314

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78316

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78315

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78317

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2022-3552

CVE-2022-3552 BoxBilling=4.22.1.5 - Esecuzione Remota di Codice RCE Utilizzo root@kitploit: python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...

CVE-2022-46169

Cacti | Bypass dell'autenticazione | RCE | CVE-2022-46169 Cacti: Exploit di esecuzione remota di codice non autenticato in Ruby Cacti Docker Questa è un'applicazione dockerizzata vulnerabile alla vulnerabilità RCE di Cacti CVE-2022-46169. Segui il link per avviare Cacti root@kitploit:...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE RCE não autenticada Joomla! JCE extension 2.9.99.5 - Upload Arbitrário de Arquivo PHP e Execução Remota de Código não autenticados 🔎 Consultas em Mecanismos de Busca Shodan...

langflow-CVE-2026-33017-poc

CVE-2026-33017 — PoC di RCE non autenticata in Langflow Solo per scopi educativi e test autorizzati. Riepilogo Langflow = 1.8.1 espone un endpoint pubblico di build dei flow che accetta dati di flow controllati dall'attaccante contenenti codice arbitrario. Questi dati vengono passati a...

CVE-2025-13486

🔴 CVE-2025-13486 - Exploit del plugin WordPress Advanced Custom Fields Extended ACFE 📋 Panoramica Exploit proof-of-concept per CVE-2025-13486 , una vulnerabilità critica nel plugin WordPress Advanced Custom Fields: Extended ACFE che consente l'esecuzione remota di codice portando all'escalation d...

CVE-2026-78317 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64762

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78317

A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...

EUVD-2026-64761

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78316

Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows a remote attacker to achieve remote code execution . The attack vector is network-based with low complexity and requires only low privileges and no user interaction , resulting in high impact across confidentia...