urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC-Heap-Überlauf → RCE PoC Proof-of-Concept für einen remote auslösbaren Heap-Pufferüberlauf im DNS-over-QUIC-Empfangspfad DoQ von Knot Resolver, der eine Remote-Codeausführung als der Dienstbenutzer knot-resolver ermöglicht. Komponente: kresd DoQ-Listener...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - RCE por Desserialização no Microsoft SharePoint Relatório de Cibersegurança no Estilo Consultant Relatório profissional de avaliação de vulnerabilidade para risco de desserialização no SharePoint, incluindo resumo executivo, impacto técnico, remediação e estratégia de mitigação. ...

hack-winrar

hack-winrar WinRar विंडोज के लिए एक बहुत व्यापक रूप से जाना जाने वाला सॉफ्टवेर है। WinRaR के पिछले संस्करण में एक कमजोरी थी जिसे फरवरी-2019 में पैच किया गया था। अधिकांश लोगों ने winrar को अपडेट नहीं किया, इसलिए वे इस एब्सोल्यूट पाथ ट्रैवर्सल बग CVE-2018-20250 के प्रति संवेदनशील हैं। विनरार से कोड...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidade Crítica na Cadeia de Suprimentos do Mecanismo de Atualização do NiceHash QuickMiner Author: Prince T Philip Role: Pesquisador de Segurança Independente Severity: CRÍTICA — CVSS 9.8 Impact: Execução Remota de Código / Comprometimento da Cadeia de Suprimentos Status:...

Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

🔍 Scanner RCE per Next.js - CVE-2025-55182 e CVE-2025-66478 Un potente e facile da usare scanner per rilevare vulnerabilità critiche RCE nelle applicazioni Next.js 🎯 Panoramica Uno scanner avanzato di vulnerabilità per rilevare CVE-2025-55182 e CVE-2025-66478 - vulnerabilità critiche di Esecuzion...

CVE-2022-42889-PoC

CVE-2022-42889 noto anche come Text4Shell Prova di concetto RCE Text4Shell è il nome popolare di una vulnerabilità software critica scoperta nella libreria Apache Commons Text vedi CVE-2022-42889. Questo repository ha lo scopo di dimostrare una Remote Code Execution RCE che sfrutta questa CVE. Il...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-74591

A flaw was found in the Linux kernel. A race condition in the filemapaddfolio function, responsible for managing memory pages, can occur during specific memory allocation retries. If another process resolves a memory conflict while the current operation is paused, an incorrect memory address migh...

React2Shell-Library

React2Shell Bibliothek Eine kuratierte Liste von Ressourcen zu CVE-2025-55182 , der kritischen Remote Code Execution RCE-Sicherheitslücke in React Server Components, bekannt als "React2Shell". Ziel: Die Geschichte, Mechanik und Behebung der React2Shell-Sicherheitslücke für Forscher und...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Estensione Burp Suite Un'estensione Burp Suite ad alta fedeltà per rilevare la vulnerabilità Remote Code Execution RCE di Next.js / React Server Components RSC CVE-2025-55182 e CVE-2025-66478. Questa estensione implementa la logica di rilevamento scoperta dal Searchlight...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn come presentato al BlackHat Europe 2010 - questa versione incorpora CVE-2010-0738, la vulnerabilità di bypass dell'autenticazione JBoss tramite manipolazione del verbo VERB, scoperta da Minded Security. C. Papathanasiou 2010 INTRODUZIONE Questo script JBoss distribuisc...

CVE-2026-33017

CVE-2026-33017 — Langflow Esecuzione di codice in remoto non autenticata Autore: dynamo2k1 Gravità: Critica CVSSv3: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Panoramica CVE-2026-33017 è una vulnerabilità critica di esecuzione di codice in remoto non autenticata in Langflow, una piattaforma...

CVE-2026-74727

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an OpenVPN ovpn peer is removed concurrently while the system attempts to rehash it. This can lead to the peer being re-inserted into internal tables after it has been logically removed, creating a Use-After-Free...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...