ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

A flaw was found in Ghostscript. This heap-based buffer overflow vulnerability in the JPEG 2000 output adapter allows an attacker to cause memory corruption by supplying a specially crafted PDF file. The crafted PDF contains a JPEG 2000 image with mismatched component subsampling factors...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

MAGNOLIA-8348

MAGNOLIA-8348: Обход ограничений FreeMarker 3 в Magnolia CMS Проблема в фильтре FreeMarker в Magnolia CMS версии 6.2.17 и ниже позволяет злоумышленникам обходить ограничения безопасности и выполнять произвольный код, читать/записывать/перемещать/копировать/удалять произвольные файлы или запускать...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

EUVD-2026-91200

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93029

A stored XSS vulnerability exists in the WHM Manage SSL Hosts interface , which can allow for arbitrary code execution . The vulnerability is associated with CWE-79 (Improper Neutralization of Input During Web Page Generation). Based on the CVSS v3.0 metric, the flaw has a CRITICAL severity score...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

EUVD-2026-91199

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

CVE-2026-93697

A stored XSS vulnerability exists in the WHM Mass Modify Accounts interface, potentially allowing for arbitrary code execution . The vulnerability is characterized by a CRITICAL base severity score of 9.0, where an attacker with low privileges can achieve high impact on confidentiality, integrity...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

MAGNOLIA-8281

MAGNOLIA-8281: Обход ограничений FreeMarker 2 в Magnolia CMS Проблема в фильтре FreeMarker в Magnolia CMS v6.2.16 и ниже позволяет злоумышленникам обходить ограничения безопасности и читать/записывать/перемещать/копировать/удалять произвольные файлы с помощью специально созданной полезной нагрузк...

jvmtiAgentLoad-Exploit

Выполнение произвольного кода через jvmtiAgentLoad Описание: Инструменты и код для генерации вредоносного JAR-файла для эксплуатации jvmtiAgentLoad Использование: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Целевая система Linux Следующая команда создаёт...

DS-Wireless-Communication-Remote-Code-Execution

Удалённое выполнение кода при беспроводной связи DS Внедряет произвольный код в игру клиента. Предварительные требования Python 3.10 pip pydivert Использование pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py CVE-ID CVE-2023-45887 Лицензия GNU General Public...

CVE-2025-32463-POC

CVE-2025-32463 - локальное повышение привилегий в sudo PoC ⚠️ Этот репозиторий содержит эксплойт Proof of Concept PoC для CVE-2025-32463 Предназначен только для образовательных целей и использования в авторизованных средах. 🧠 О уязвимости CVE-2025-32463 — это локальная уязвимость повышения...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 is susceptible to remote code execution. An authenticated user authorized to import projects can import a maliciously crafted project, thus possibly being able to execute malware, obtain sensitive information, modi...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...