CVE-2026-77643

A flaw was found in Xapian xapian-core. This cross-site scripting XSS vulnerability is due to incomplete HTML escaping by the Xapian::MSet::snippet function. A remote attacker could exploit this by injecting malicious script, leading to arbitrary code execution in the user's browser context. This...

HTB_Nibbles

HTBNibbles In questo repository troverai il report tecnico di Nibbles, l'exploit pwned.py per abusare della CVE-2015-6967 e uno strumento autopwn autopwn.py nel caso tu voglia risolvere la macchina in HackTheBox. Strumento Pwned.py: Questo file ti aiuterà a sfruttare la CVE-2015-6967. Se vuoi...

CVE-2024-9264

CVE-2024-9264 RCE autenticato in Grafana v11.0 tramite SQL Expressions - PoC Exploit CVE-2024-9264 - Grafana v11.0 Esecuzione di codice remoto autenticato RCE PoC Introduzione CVE-2024-9264 è una grave falla di esecuzione di codice remoto e inclusione di file locali introdotta nella funzionalità...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 Bedrohungsanalyse Microsoft MSDT Remote Code Execution Zero-Day — Untersuchung der aktiven Ausnutzung durch MUHAMMAD ZAWAR KHATTAK 🔗 Vollständigen Writeup ansehen → 🧪 Szenario An einem Freitagabend wurde das Team über eine neue RCE-Schwachstelle alarmiert, die aktiv in...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote-Code-Ausführung authentifiziert CVE-2025-5196 Wing FTP Server stellt eine administrative Lua-Skriptkonsole bereit, die über seine Weboberfläche zugänglich ist. Durch unzureichendes Sandboxing können authentifizierte Administratoren beliebigen Lua-Code ausführen...

threat-intel-cve-2024-3094

Report di Threat Intelligence: CVE-2024-3094 – Backdoor di XZ Utils Questo repository contiene un report di threat intelligence che analizza CVE-2024-3094 , una vulnerabilità backdoor di alto profilo scoperta nel tool di compressione xz-utils nel 2024. CVE-2024-3094 è un grave compromesso della...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Beschreibung Dieses Repository enthält einen Python-basierten Proof of Concept PoC für CVE-2024-28397, eine Sandbox-Escape-Schwachstelle im Js2Py-JavaScript-Interpreter für Python. Wenn die Zielanwendung nicht vertrauenswürdigen JS-Code über Js2Py auswertet, kann ein...

FiberBreak

FiberBreak Ausnutzungsframework für CVE-2025-55182 React2Shell – Kritische RCE-Sicherheitslücke in React Server Components. Übersicht CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Typ : Remote Code Execution RCE Betroffen : React 19.0.0-rc.0 bis 19.0.0, Next.js 15.0.0 bis 15.0.3 Entdeckt von : Lachla...

Peyara-FileUpload

एक्सप्लॉइट शीर्षक: Peyara रिमोट माउस v1.0.1 बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड दिनांक: 2025-01-06 एक्सप्लॉइट लेखक: tmrswrr सॉफ़्टवेयर लिंक: https://peyara-remote-mouse.vercel.app/ प्लेटफ़ॉर्म: विंडोज़ संस्करण: v1.0.1 परीक्षण किया गया: विंडोज़ 10 root@kitploit: USAGE : python3 combinedscript.py...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Modulo Translate Vulnerabilità di esecuzione di codice remoto...

CVE-2026-74661

A flaw was found in the mac802154 component of the Linux kernel. This use-after-free vulnerability allows a local attacker to potentially cause a system crash denial of service or execute arbitrary code. The issue arises when the beacon worker attempts to access memory that has already been freed...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC Questo è il codice exploit Proof-of-concept per tre vulnerabilità scoperte da Jonas Mattsson e Hugo van den Toorn presso i Ghost Labs di Outpost24. Queste vulnerabilità sono state scoperte nel componente web server su una macchina di controllo orario Pyrescom Termod4. Queste...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC-Heap-Überlauf → RCE PoC Proof-of-Concept für einen remote auslösbaren Heap-Pufferüberlauf im DNS-over-QUIC-Empfangspfad DoQ von Knot Resolver, der eine Remote-Codeausführung als der Dienstbenutzer knot-resolver ermöglicht. Komponente: kresd DoQ-Listener...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - RCE por Desserialização no Microsoft SharePoint Relatório de Cibersegurança no Estilo Consultant Relatório profissional de avaliação de vulnerabilidade para risco de desserialização no SharePoint, incluindo resumo executivo, impacto técnico, remediação e estratégia de mitigação. ...

hack-winrar

hack-winrar WinRar विंडोज के लिए एक बहुत व्यापक रूप से जाना जाने वाला सॉफ्टवेर है। WinRaR के पिछले संस्करण में एक कमजोरी थी जिसे फरवरी-2019 में पैच किया गया था। अधिकांश लोगों ने winrar को अपडेट नहीं किया, इसलिए वे इस एब्सोल्यूट पाथ ट्रैवर्सल बग CVE-2018-20250 के प्रति संवेदनशील हैं। विनरार से कोड...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidade Crítica na Cadeia de Suprimentos do Mecanismo de Atualização do NiceHash QuickMiner Author: Prince T Philip Role: Pesquisador de Segurança Independente Severity: CRÍTICA — CVSS 9.8 Impact: Execução Remota de Código / Comprometimento da Cadeia de Suprimentos Status:...

Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

🔍 Scanner RCE per Next.js - CVE-2025-55182 e CVE-2025-66478 Un potente e facile da usare scanner per rilevare vulnerabilità critiche RCE nelle applicazioni Next.js 🎯 Panoramica Uno scanner avanzato di vulnerabilità per rilevare CVE-2025-55182 e CVE-2025-66478 - vulnerabilità critiche di Esecuzion...

CVE-2022-42889-PoC

CVE-2022-42889 noto anche come Text4Shell Prova di concetto RCE Text4Shell è il nome popolare di una vulnerabilità software critica scoperta nella libreria Apache Commons Text vedi CVE-2022-42889. Questo repository ha lo scopo di dimostrare una Remote Code Execution RCE che sfrutta questa CVE. Il...