gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscannergettoken function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption,...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 Estas herramientas son de código abierto, puedes reescribirlas, pero recuerda nunca eliminar las herramientas del autor, y estas herramientas son gratuitas, ¡no están en venta!!! ¡¡¡Los resultados del shell dependen de tu lista!!! Aquí, Jenderal92 no e...

CVE-2026-27597

CVE-2026-27597 - 版本远程代码执行 快速使用 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 利用说明 严重性： 严重（CRITICAL） CVSS： 10.0 影响： 机密性、完整性、可用性 发布时间： 2026-02-25 技术摘要 Enclave 是一个安全的 JavaScript 沙箱，专为安全的 AI 代理代码执行而设计。在 2.11.1 版本之前，可以突破 @enclave-vm/core...

CVE-2025-54897-LAB

实验室：CVE-2025-54897 - Microsoft Office SharePoint 中的反序列化漏洞 🚀 概述 本实验室演示了 Microsoft Office SharePoint 中的一个反序列化漏洞，该漏洞可实现远程代码执行（RCE）。此问题源于 SharePoint 的对象反序列化例程对不受信任的序列化数据处理不当，允许经过身份验证的攻击者在目标服务器上执行任意代码。该漏洞的 CVSSv3 评分为 8.8，属于高危漏洞，影响多个 SharePoint 版本，包括 Enterprise Server 2016、Server 2019 和 Subscription...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC ¡considera esto para encadenar CVE-2019-5418! ¡Combina a la perfección con CVE-2019-5418! Captura de pantalla del POC 🚨 Advertencia Este repositorio contiene un proof-of-concept PoC que demuestra la ejecución remota de código RCE en aplicaciones Ruby ...

CVE-2026-0911

CVE-2026-0911 — Hustle 模块导入 PoC 针对 WordPress 插件 Hustle （wordpress-popup，WPMU DEV）的 CVE-2026-0911 内的 wphandleupload 调用以 testtype = false 执行，导致文件类型验证薄弱；即使导入后的 JSON 验证失败，上传的文件也可能 不会被删除 （“孤儿”文件）。如果服务器在 wp-content/uploads 下执行 PHP，这实际上可能成为通向远程代码执行的链条的一部分。在已修补版本中，引入了 testtype = true 和临时 uploadmimes 来限制...

CVE-2026-33147

CVE-2026-33147 CVE-2026-33147（gmtremotedatasetid 中的基于栈的缓冲区溢出） 摘要 在 src/gmtremote.c 的 gmtremotedatasetid 函数中发现了一个基于栈的缓冲区溢出漏洞。当将特制的超长字符串作为数据集标识符（例如，通过 which 模块）传入时，会导致程序崩溃或可能被利用执行任意代码。 详细信息 该漏洞是由于在将用户可控的数据集名称复制到固定大小的栈缓冲区 filePATHMAX 时，不安全地使用了 strcpy（或类似的无界字符串操作）所致。 易受攻击的函数：gmtremotedatasetid...

CVE-2026-3854

CVE-2026-3854：通过 X-Stat 头注入在 GitHub 上实现 RCE 关于 Wiz Research 在 GitHub.com 和 GitHub Enterprise Server 的内部 git push 管道中发现该漏洞的实用摘要。 警告 本材料仅供教育和进攻性安全研究之用。 该漏洞已在所有受支持的版本中被 GitHub 修复。 请勿尝试针对非您所有或未经您书面明确授权的环境进行复现。未经授权访问系统在巴西属于犯罪行为（第 12.737/2012 号法律，即 Carolina Dieckmann 法），可能构成计算机设备入侵罪，可判处拘留。 摘要的摘要...

CVE-2026-33017-Langflow-RCE-PoC

CVE-2026-33017-Langflow-RCE-PoC Langflow 1.8.1 及更早版本中的漏洞允许远程、未认证的攻击者在主机上实现任意命令执行。 描述 POST /api/v1/buildpublictmp/flowid/flow 端点允许任何人无需认证即可构建公共流程。 通过提供可选的 data 参数，攻击者可以用自己精心构造的定义覆盖存储的流程，并在节点配置中嵌入任意 Python 代码。这些由用户控制的代码通过 exec 执行，且没有任何沙箱或验证机制，从而导致未认证的远程代码执行。 受影响版本 root@kitploit: Langflow 1.8.1 及更早版...

CVE-2026-4447

CVE-2026-4447 - Google Chrome 旧版本 V8 远程代码执行漏洞 快速使用 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 利用说明 严重性： 高 CVSS： 8.8 影响范围： 机密性、完整性、可用性 发布时间： 2026-03-20 技术摘要 Google Chrome 146.0.7680.153 之前版本中的 V8 引擎存在不当实现，允许远程攻击者通过精心构造的 HTML 页面在沙箱内执行任意代码。（Chromium...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed...

Flowise < 3.1.2 - node-custom-function Unauthorized RCE

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any authenticated user or API key to submit arbitrary JavaScript to the Custom JS Function node. When...

Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()

Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...

Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...

Likeshop < 2.5.7.20210311 - Arbitrary File Upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file with an...

Smart S210 Management Platform - Arbitary File Upload

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. id: CVE-2024-0939 info: name: Smar...