CVE-2026-108161

FusionPBX through 5.6.5 contains an OS command injection vulnerability in callrecordings::download that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the recordname filename template is enabled, attackers can embed shell metacharacters...

react2shell

React2Shell: RCE 0-day nei React Server Components CVE-2025-55182 React e CVE-2025-66478 Next.js Questo repository contiene codice exploit per test di sicurezza autorizzati e solo a scopo educativo. Vedi anche: Molti ricercatori hanno pubblicato analisi di questa vulnerabilità. Controlla la sezio...

react2shell-scanner

react2shell-guard Sicherheitsscanner für CVE-2025-55182 – eine kritische CVSS 10.0 nicht authentifizierte Remote-Code-Ausführungs-Sicherheitslücke in React Server Components. ⚠️ HAFTUNGSAUSSCHLUSS Dies ist ein Sicherheitsscanner , KEIN Exploit-Tool. Es soll Entwicklern und Sicherheitsteams helfen,...

kraker

Acerca de Configuración Servidor Configuración Agente Configuración Compilar desde el código fuente Usar la versión precompilada Contactos Acerca de Kraker es un sistema distribuido de fuerza bruta de contraseñas que te permite ejecutar y gestionar hashcat en diferentes servidores y estaciones de...

cve-2022-36804

CVE-2022-36804: RCE pre-autenticazione in Atlassian Bitbucket Server Una vulnerabilità critica di command injection è stata trovata in molteplici endpoint API di Atlassian Bit bucket Server e Data center. Questa vulnerabilità riguarda tutte le versioni di Bitbucket Server e Data Center rilasciate...

GO-2026-6607 vulnerabilities

Vulnerabilities for packages: influxd, loki, falco-exporter, go-fips-md5, crossplane-provider-aws-sns, crossplane-provider-aws-elasticsearch-fips, ceph-csi-operator-fips, keda-http-add-on, external-secrets-fips, flux-source-controller, victoriametrics-fips, helm-operator-fips, knative-serving,...

GHSA-F5VF-8PVC-394G vulnerabilities

Vulnerabilities for packages: influxd, loki, go-fips-md5, crossplane-provider-aws-sns, crossplane-provider-aws-elasticsearch-fips, ceph-csi-operator-fips, keda-http-add-on, external-secrets-fips, flux-source-controller, victoriametrics-fips, helm-operator-fips, knative-serving,...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: aactl, cert-manager, karpenter, flux, commercial-gitlab-rails-ee, commercial-nginx-ingress, consul-k8s, tempo-fips, telegraf, loki, spire-server, qemu-guesthelper, commercial-gitlab-workhorse-ee-fips, prometheus, containerd, cosign-fips, kyverno,...

CVE-2026-56866 vulnerabilities

Vulnerabilities for packages: influxd, loki, go-fips-md5, crossplane-provider-aws-sns, crossplane-provider-aws-elasticsearch-fips, ceph-csi-operator-fips, keda-http-add-on, external-secrets-fips, flux-source-controller, victoriametrics-fips, helm-operator-fips, knative-serving,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k6, rclone, argo-cd, chartmuseum, kyverno-policy-reporter-ui, terragrunt, prometheus-adapter, spire-server, grafana-pyroscope, grafana-alloy, continuity, zarf, external-dns, headlamp, karpenter, grafana, temporal-ui-server, mesosphere-vsphere-csi,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, k6, rclone, argo-cd, chartmuseum, kyverno-policy-reporter-ui, terragrunt, prometheus-adapter, spire-server, grafana-pyroscope, grafana-alloy, continuity, zarf, external-dns, headlamp, karpenter, grafana, temporal-ui-server, mesosphere-vsphere-csi,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, cert-manager, karpenter, aactl, ingress-nginx-controller, kubernetes, spire-server, flux, falco-no-driver, external-dns, loki...

react2shellpoc

Questo repository contiene una prova di concetto che dimostra come una specifica classe di vulnerabilità dei React Server Component si comporta all'interno di un ambiente di formazione controllato e legale. Manuale ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /...

CVE-2026-104021

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...

EUVD-2026-96068

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...

Security Bulletin: Due to the use of WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is affected by multiple vulnerabilities

Summary IBM Tivoli Application Dependency Discovery Manager bundles WebSphere Application Server Liberty, vulnerabilities has been remediated in an e-fix CVE-2026-65432, CVE-2026-66142, CVE-2026-66143, CVE-2026-66144, CVE-2026-14532, CVE-2026-14909, CVE-2026-79715,CVE-2026-77816, CVE-2026-11713,...

fix-react2shell-next

fix-react2shell-next Un comando per risolvere CVE-2025-66478 React 2 Shell RCE nella tua app Next.js / React RSC. npx fix-react2shell-next Aggiornamenti di versione deterministici secondo gli advisory ufficiali. Cosa fa 1. Scansiona ricorsivamente tutti i file package.json gestisce monorepo 2...

tivoli-poc

tivoli-poc Código PoC de CVE-2017-1635 CVEID: CVE-2017-1635 Puntuación base CVSS: 8 Productos y versiones afectados: componente KDH de IBM Tivoli Monitoring Basic Services KGL,KAX para las versiones 6.2.2.0 a 6.2.2.9 Existe una vulnerabilidad en el servidor web interno proporcionado por los...