CVE-2015-1578-PoC-Metasploit

Módulo Metasploit para CVE-2015-1578 Visão Geral Este é um módulo do Metasploit para CVE-2015-1578 , uma vulnerabilidade de estouro de buffer em Achat 0.150 beta7 no Windows. A exploração leva à execução remota de código por meio de um pacote UDP malicioso. Objetivo Este módulo foi desenvolvido...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

CVE-2026-74642

A flaw was found in the ALSA USB MIDI2 EPs component of the Linux kernel. This use-after-free UAF vulnerability occurs due to a delayed release of MIDI2 endpoints, leading to an attempt to dereference an already freed Universal MIDI Packet UMP endpoint object. An attacker could potentially exploi...

CVE-2026-74608

A flaw was found in the Server Message Block SMB client of the Linux kernel. A use-after-free vulnerability exists in the cifstryaddingchannels function. This occurs when a concurrent interface list refresh removes a reference to an interface while a channel creation is in progress and fails,...

CVE-2022-39073

CVE-2022-39073 फ़र्मवेयर विवरण: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 पूर्वापेक्षाएँ requests pip install requests कमांड इंजेक्शन यह भेद्यता ztenetlinkdetect बाइनरी और वेबसर्वर goahead बाइनरी में WATCHDOGSWITCH हैंडलर के बीच एक साझा कमांड...

CVE-2025-32433

CVE-2025-32433: Exploit del server SSH di Erlang/OTP Informazioni CVE-2025-32433: È stata scoperta una vulnerabilità critica nel server SSH di Erlang/OTP che consente ad attaccanti non autenticati di ottenere l'esecuzione remota di codice. Una handshake SSH malformata aggira l'autenticazione e...

CVE-2026-73194

A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...

CVE-2026-73193

A flaw was found in DBI. On 32-bit Perl systems, a vulnerability exists in the preparse function due to an integer wraparound when calculating the output buffer size. A remote attacker can exploit this by providing a specially crafted, excessively large statement. This can lead to a heap...

CVE-2026-73066

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

CVE-2026-68766

A flaw was found in hashcat. This vulnerability allows an attacker to inject malicious command-line options when parsing restore files. By crafting a specially designed restore file, an attacker can append arbitrary content to files, potentially leading to arbitrary code execution on the system...

CVE-2020-11978

CVE-2020-11978: Esecuzione remota di codice nei DAG di esempio di Apache Airflow Informazioni Descrizione: Questa vulnerabilità consente RCE quando i DAG di esempio di Airflow vengono caricati, potenzialmente senza autenticazione con CVE-2020-13927 Credito CVE : xuxiang di DtDream security Versio...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Esecuzione di codice remoto RCE CVE-2021-4045 🔐 "PWNTAPO: Svelata l'iniezione di comandi nelle telecamere TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 Leggi l'exploit su exploit db Si tratta di una vulnerabilità di iniezione di comandi che colpisce tutte le versioni del...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.0 RCE-Sicherheitslücke Dies ist ein Skript zur Ausnutzung von CVE-2017-5638 - Es ermöglicht einem Angreifer, über den Content-Type-Header Betriebssystembefehle in eine Webanwendung einzuschleusen. Apache Struts 2 ist ein Open-Source-Webanwendungsframework zur...

CVE-2018-8414-POC

CVE-2018-8414 POC Windows Shell Package Setting Sicherheitsanfälligkeit für Remotecodeausführung Seit: Windows 10 Version 1703 bis 1803 / Windows Server Version 1709 bis 1803 Hinweis: Manchmal schlägt der Exploit je nach Dateispeicherort fehl Standardsicherheitseinstellungen, kopieren Sie daher d...

CVE-2024-4577-EXPLOIT

CVE-2024-4577 - Iniezione di Argomenti CGI in PHP - Esecuzione Remota di Codice RCE In alcune versioni di PHP 8.1. precedenti alla 8.1.29, 8.2. precedenti alla 8.2.20 e 8.3. precedenti alla 8.3.8, esiste una vulnerabilità critica quando si utilizza PHP con Apache e PHP-CGI su Windows. Se il siste...

CVE-2025-49113

CVE-2025-49113 Roundcube ≤ 1.6.10 RCE post-autenticazione tramite deserializzazione di oggetti PHP...

CVE-2026-76843

CVE-2026-76843 affects the official Flair wheels for versions 0.15.0 and 0.15.1 . The file flair/models/clustering.py remains present in the distributed package despite being removed from the documented API. Its ClusteringModel.load static method deserializes via pickle.loads(joblib.load(str(mode...

EUVD-2026-64849

The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loadsjoblib.loadstrmodelfile and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that...