CVE-2020-24972

Donc CVE-2020-24972 découle en fait d'un autre CVE. Je ne me souviens pas du CVE qui a été attribué, mais il concerne l'option de ligne de commande platformpluginpath de Qt. Donc, en substance, le problème vient de l'utilisation de Qt, per se l'option platformpluginpath . "Ce paramètre est censé...

CVE-2022-0847-Exploit-Implementation

CVE-2022-0847-Exploit-Implementation Ceci est une POC montrant comment obtenir un shell bash inversé pour exécuter du code arbitraire sur une machine distante en utilisant CVE-2022-0847, "Dirty Pipe Exploit". Cette vulnérabilité n'affecte que les versions du noyau Linux 5.8 ou plus récentes, mais...

printix-CVE-2022-29554

CVE-2022-29554 Version simple | Version imprimable Une vulnérabilité de type "Mauvaise gestion des entrées vers l'API" ou "Méthode ou fonction dangereuse exposée" dans PrintixService.exe, du produit "Printix Secure Cloud Print Management" de Kofax Printix, version 1.3.1156.0 et inférieures, perme...

CVE-2026-92955

A flaw was found in vm2. This vulnerability allows an attacker running untrusted code within the sandbox to achieve arbitrary code execution on the host system. By accessing internal host properties through standard output streams, the untrusted code can manipulate process event handlers and esca...

CVE-2026-94084

An invalid memory reference vulnerability exists in Suricata's HTTP/2 application-layer engine during multi-buffer management Http2ThreadMultiBuf. When inspected HTTP/2 response traffic triggers signature rules that evaluate the http.responseheader keyword simultaneously with and without sticky...

CVE-2025-3248

Exploit Langflow CVE-2025-3248 Un exploit basé sur Python pour CVE-2025-3248, permettant à des attaquants distants et non authentifiés d'exécuter du code arbitraire sur des instances Langflow vulnérables via des requêtes HTTP malveillantes. Fonctionnalités Scan d'une seule URL ou en masse depuis ...

AZL-105923 CVE-2026-94422 affecting package xdg-dbus-proxy 0.1.6-2

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

EUVD-2026-91646

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

The xdg-dbus-proxy filtering proxy (versions before 0.1.9 ) contains an incorrect implementation of message filtering. An attacker can bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. This vulnerability could allow a malicious ...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC Détails de CVE-2025-0411 « Cette vulnérabilité score CVSS 7.0 permet à des attaquants distants de contourner le mécanisme de protection Mark-of-the-Web sur les installations affectées de 7-Zip. L'interaction de l'utilisateur est nécessaire pour exploiter cette vulnérabilit...

CVE-2026-59668

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”...

CVE-2026-59666

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affected – endpoint “/es/origins/store”...

CVE-2026-59667

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizemployees/update”...

CVE-2024-3660-PoC

CVE-2024-3660 – Выполнение произвольного кода в TensorFlow Keras через вредоносную модель Обзор CVE-2024-3660 – это уязвимость выполнения произвольного кода в фреймворке Keras библиотеки TensorFlow, затрагивающая версии \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && ...

CVE-2026-59668

The Repasat application is susceptible to a Cross-Site Scripting (XSS) vulnerability. An attacker can exploit the "nomTamano" parameter on the "/es/companysizebills/store" endpoint to trick a user into executing arbitrary code within their browser. No specific remediation steps, exploit links, or...

EUVD-2026-91370

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affected – endpoint “/es/companysizebills/store”...