threat-intel-cve-2024-3094

Report di Threat Intelligence: CVE-2024-3094 – Backdoor di XZ Utils Questo repository contiene un report di threat intelligence che analizza CVE-2024-3094 , una vulnerabilità backdoor di alto profilo scoperta nel tool di compressione xz-utils nel 2024. CVE-2024-3094 è un grave compromesso della...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE Beschreibung Dieses Repository enthält einen Python-basierten Proof of Concept PoC für CVE-2024-28397, eine Sandbox-Escape-Schwachstelle im Js2Py-JavaScript-Interpreter für Python. Wenn die Zielanwendung nicht vertrauenswürdigen JS-Code über Js2Py auswertet, kann ein...

FiberBreak

FiberBreak Ausnutzungsframework für CVE-2025-55182 React2Shell – Kritische RCE-Sicherheitslücke in React Server Components. Übersicht CVE : CVE-2025-55182 CVSS : 10.0 CRITICAL Typ : Remote Code Execution RCE Betroffen : React 19.0.0-rc.0 bis 19.0.0, Next.js 15.0.0 bis 15.0.3 Entdeckt von : Lachla...

Peyara-FileUpload

एक्सप्लॉइट शीर्षक: Peyara रिमोट माउस v1.0.1 बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड दिनांक: 2025-01-06 एक्सप्लॉइट लेखक: tmrswrr सॉफ़्टवेयर लिंक: https://peyara-remote-mouse.vercel.app/ प्लेटफ़ॉर्म: विंडोज़ संस्करण: v1.0.1 परीक्षण किया गया: विंडोज़ 10 root@kitploit: USAGE : python3 combinedscript.py...

CVE-2025-67886

CVE-2025-67886 Bitrix24 = 25.100.300 Modulo Translate Vulnerabilità di esecuzione di codice remoto...

CVE-2026-74661

A flaw was found in the mac802154 component of the Linux kernel. This use-after-free vulnerability allows a local attacker to potentially cause a system crash denial of service or execute arbitrary code. The issue arises when the beacon worker attempts to access memory that has already been freed...

Pyrescom-Termod-PoC

Pyrescom-Termod-PoC Questo è il codice exploit Proof-of-concept per tre vulnerabilità scoperte da Jonas Mattsson e Hugo van den Toorn presso i Ghost Labs di Outpost24. Queste vulnerabilità sono state scoperte nel componente web server su una macchina di controllo orario Pyrescom Termod4. Queste...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC-Heap-Überlauf → RCE PoC Proof-of-Concept für einen remote auslösbaren Heap-Pufferüberlauf im DNS-over-QUIC-Empfangspfad DoQ von Knot Resolver, der eine Remote-Codeausführung als der Dienstbenutzer knot-resolver ermöglicht. Komponente: kresd DoQ-Listener...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - RCE por Desserialização no Microsoft SharePoint Relatório de Cibersegurança no Estilo Consultant Relatório profissional de avaliação de vulnerabilidade para risco de desserialização no SharePoint, incluindo resumo executivo, impacto técnico, remediação e estratégia de mitigação. ...

hack-winrar

hack-winrar WinRar विंडोज के लिए एक बहुत व्यापक रूप से जाना जाने वाला सॉफ्टवेर है। WinRaR के पिछले संस्करण में एक कमजोरी थी जिसे फरवरी-2019 में पैच किया गया था। अधिकांश लोगों ने winrar को अपडेट नहीं किया, इसलिए वे इस एब्सोल्यूट पाथ ट्रैवर्सल बग CVE-2018-20250 के प्रति संवेदनशील हैं। विनरार से कोड...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidade Crítica na Cadeia de Suprimentos do Mecanismo de Atualização do NiceHash QuickMiner Author: Prince T Philip Role: Pesquisador de Segurança Independente Severity: CRÍTICA — CVSS 9.8 Impact: Execução Remota de Código / Comprometimento da Cadeia de Suprimentos Status:...

Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

🔍 Scanner RCE per Next.js - CVE-2025-55182 e CVE-2025-66478 Un potente e facile da usare scanner per rilevare vulnerabilità critiche RCE nelle applicazioni Next.js 🎯 Panoramica Uno scanner avanzato di vulnerabilità per rilevare CVE-2025-55182 e CVE-2025-66478 - vulnerabilità critiche di Esecuzion...

CVE-2022-42889-PoC

CVE-2022-42889 noto anche come Text4Shell Prova di concetto RCE Text4Shell è il nome popolare di una vulnerabilità software critica scoperta nella libreria Apache Commons Text vedi CVE-2022-42889. Questo repository ha lo scopo di dimostrare una Remote Code Execution RCE che sfrutta questa CVE. Il...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-74591

A flaw was found in the Linux kernel. A race condition in the filemapaddfolio function, responsible for managing memory pages, can occur during specific memory allocation retries. If another process resolves a memory conflict while the current operation is paused, an incorrect memory address migh...

React2Shell-Library

React2Shell Bibliothek Eine kuratierte Liste von Ressourcen zu CVE-2025-55182 , der kritischen Remote Code Execution RCE-Sicherheitslücke in React Server Components, bekannt als "React2Shell". Ziel: Die Geschichte, Mechanik und Behebung der React2Shell-Sicherheitslücke für Forscher und...