517326 matches found
CVE-2026-30345
CVE-2026-30345 ъ░ЬыЕР ьжЭыкЕPoC CTFd 3.8.2 ы░▒ьЧЕ ъ░Аьа╕ьШдъ╕░ ъ╕░ыКеьЭШ ьЮДьЭШ эММьЭ╝ ьУ░ъ╕░ ь╖иьХ╜ьаР. ы╣аые╕ ьЛЬьЮС cve202630345bashrcpoc.py ьЛдэЦЙ ьаД ьЭ╡ьКдэФМыбЬьЮЗьЧР ызЮъ▓М ъ░ТьЭД ьЧЕыН░ьЭ┤эК╕эХ┤ьХ╝ эХйыЛИыЛд. RHOST, ъ│╡ъ▓йьЮР IP ыШРыКФ PORT, ъ╖╕ыжмъ│а ьЭ╡ьКдэФМыбЬьЮЗьЧР ьВмьЪйыРШыКФ ьЮРъ▓й ьжЭыкЕъ│╝ ъ░ЩьЭА ъ░ТыУдьЮЕыЛИыЛд. ьВмьЪйы▓Х root@kitploit: python cve202630345bashrcpoc.py ым╕ьаЬ эХ┤ъ▓░ "db folder is missing" ьШдыеШыбЬ ъ░Аьа╕ьШдъ╕░ ьЛдэМи ым╕ьаЬ: ьЬаэЪиэХЬ db/ ыВ┤ы│┤ыВ┤ъ╕░ эММьЭ╝ьЭД эПмэХиэХШьзА...
CVE-2026-4800-POC
CVE-2026-4800-POC ┘Ж╪┤╪▒╪й ╪г┘Е┘Ж┘К╪й https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc ╪е╪л╪и╪з╪к ╪з┘Д┘Е┘Б┘З┘И┘Е POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; ╪з┘Д╪к╪п┘Б┘В...
CVE-2026-0300
╪г╪п╪з╪й ╪з┘Д┘Е╪│╪н ╪║┘К╪▒ ╪з┘Д╪к╪п┘Е┘К╪▒┘К ┘Д╪з╪│╪к┘Г╪┤╪з┘Б ╪з┘Д╪к╪╣╪▒╪╢ ┘Д╪л╪║╪▒╪й PAN-OS CVE-2026-0300 ┘Ж╪╕╪▒╪й ╪╣╪з┘Е╪й ┘З╪░┘З ╪з┘Д╪г╪п╪з╪й ┘З┘К ╪г╪п╪з╪й ┘Е╪│╪н ╪║┘К╪▒ ╪к╪п┘Е┘К╪▒┘К ┘Д╪з╪│╪к┘Г╪┤╪з┘Б ╪з┘Д╪к╪╣╪▒╪╢ ┘Д╪к┘В┘К┘К┘Е ┘Е╪з ╪е╪░╪з ┘Г╪з┘Ж╪к ╪о╪п┘Е╪й PAN-OS ╪з┘Д┘Е╪│╪к┘З╪п┘Б╪й ┘В╪п ╪к╪╣╪▒┘С╪╢ ╪г╪│╪╖╪н┘Л╪з ┘В╪з╪и┘Д╪й ┘Д┘Д┘И╪╡┘И┘Д ╪╣╪и╪▒ ╪з┘Д╪┤╪и┘Г╪й ┘Е╪▒╪к╪и╪╖╪й ╪и┘А CVE-2026-0300. ╪з┘Д╪г╪п╪з╪й ┘Е╪о╪╡╪╡╪й ┘Д┘Д╪к╪н┘В┘В ╪з┘Д╪г┘Е┘Ж┘К ╪з┘Д╪п┘Б╪з╪╣┘К ╪з┘Д┘Е╪╡╪▒╪н ╪и┘З╪М ┘И┘Е╪▒╪з╪м╪╣╪й ╪к╪╣╪▒╪╢ ╪з┘Д╪г╪╡┘И...
CVE-2026-66786
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
CVE-2026-49832
DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution RCE is possible via Velocity Templates used by DSpace for COAR Notify/LDN...
cve-2025-59489
╪г╪п╪з╪й ╪з┘Г╪к╪┤╪з┘Б ╪л╪║╪▒╪й Unity CVE-2025-59489 ╪г╪п╪з╪й ╪з┘Г╪к╪┤╪з┘Б ╪к┘Д┘В╪з╪ж┘К ┘Д╪л╪║╪▒╪й ╪н┘В┘Ж Unity Runtime ┘Е╪о╪╡╪╡╪й ┘Д┘Е┘Ж╪╡╪з╪к ╪г┘Д╪╣╪з╪и Android. ┘Ж╪╕╪▒╪й ╪╣╪з┘Е╪й ╪╣┘Д┘Й ╪з┘Д╪л╪║╪▒╪й ┘Е╪╣╪▒┘Б CVE : CVE-2025-59489 ╪п╪▒╪м╪й CVSS : 8.4 ╪╣╪з┘Д┘К╪й ╪з┘Д┘Ж╪╖╪з┘В ╪з┘Д┘Е╪к╪г╪л╪▒ : ╪к╪╖╪и┘К┘В╪з╪к Android ╪з┘Д┘Е╪и┘Ж┘К╪й ╪и┘А Unity 2017.1 ┘И╪з┘Д╪е╪╡╪п╪з╪▒╪з╪к ╪з┘Д╪г╪н╪п╪л ╪з┘Д╪е╪╣┘Д╪з┘Ж ╪з┘Д╪▒╪│┘Е┘К :...
winrar-exploit
╪з┘Д┘И╪╡┘Б ┘З╪░╪з ┘З┘И ╪к╪╖╪и┘К┘В┘К ┘Д╪з╪│╪к╪║┘Д╪з┘Д CVE-2025-8088 ╪з┘Д╪о╪з╪╡ ╪и╪и╪▒┘Ж╪з┘Е╪м Winrar. ┘К╪│╪к╪о╪п┘Е ╪к╪п┘Б┘В╪з╪к ╪з┘Д╪и┘К╪з┘Ж╪з╪к ╪з┘Д╪и╪п┘К┘Д╪й ADS ┘И╪к╪╡╪н┘К╪н ╪з┘Д┘Е╪│╪з╪▒ ╪п╪з╪о┘Д ╪з┘Д╪г╪▒╪┤┘К┘Б. ╪╣┘Ж╪п┘Е╪з ┘К┘В┘И┘Е ╪з┘Д╪╢╪н┘К╪й ╪и╪з╪│╪к╪о╪▒╪з╪м ╪з┘Д╪г╪▒╪┤┘К┘Б ╪з┘Д┘Е╪╡╪з╪и╪М ┘К╪к┘Е ╪е╪╣╪з╪п╪й ╪к┘И╪м┘К┘З ╪н┘Е┘И┘Д╪й ADS ╪з┘Д┘Е╪╡╪н╪н╪й ┘Е╪л┘Д ┘Е┘Д┘Б ╪к┘Ж┘Б┘К╪░┘К╪М ╪г┘И ╪│┘Г╪▒╪и╪к PowerShell╪М ╪г┘И ╪╡┘И╪▒╪й PNG ┘Е╪╢╪н┘Г╪й ╪е┘Д┘Й ╪з┘Д┘Е╪│╪з╪▒ ╪з┘Д┘Е╪│╪к┘З╪п┘Б ╪╣╪з╪п╪й┘Л ┘Е╪м┘Д╪п ╪и╪п╪б...
CVE-2026-23479
CVE-2026-23479 тАФ ┘Е╪м┘Е┘И╪╣╪й Redis Use-After-Free RCE PoC ╪╡┘И╪▒╪й ╪к┘И╪▓┘К╪╣ HackSpeak. ┘К╪м┘Е╪╣ ┘З╪░╪з ╪з┘Д┘Е╪│╪к┘И╪п╪╣ ╪л┘Д╪з╪л ╪г╪п┘И╪з╪к PoC/┘Г╪┤┘Б ╪╣╪з┘Е╪й , ┘И╪з┘Д┘Г┘И╪п ┘Е╪╖╪з╪и┘В ┘Д┘Г┘Д ┘Е╪│╪к┘И╪п╪╣ ╪г╪╡┘Д┘К upstream. тЪая╕П ┘К╪н╪к┘И┘К ╪╣┘Д┘Й ┘Г┘И╪п ╪з╪│╪к╪║┘Д╪з┘Д ┘Б╪╣┘Д┘К ┘И╪г╪п┘И╪з╪к ┘Г╪┤┘Б ; ┘Е╪о╪╡╪╡ ┘Д╪г╪║╪▒╪з╪╢ ╪з┘Д╪и╪н╪л ╪з┘Д╪г┘Е┘Ж┘К ┘И╪з┘Д╪к╪н┘В┘В ┘Е┘Ж ╪з┘Д╪л╪║╪▒╪з╪к ┘И╪з┘Д╪з╪о╪к╪и╪з╪▒ ╪з┘Д┘Е╪╡╪▒╪н ╪и┘З ┘Б┘В╪╖. ┘К┘П╪▒╪м┘Й ╪з┘Д╪к╪┤╪║┘К┘Д ┘Б┘К ╪и┘К╪ж╪й ┘В╪з╪и┘Д╪й...
gimp:2.8 security update
An update is available for module.gimp, pygtk2, module.pygobject2, module.python2-pycairo, gimp, pygobject2, module.pygtk2, python2-pycairo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
EUVD-2026-70247
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
CVE-2026-66786
Submariner 's certificate-based IPsec authentication mode (IPSecCertAuthMode: true) is vulnerable to ipsec.conf stanza injection via remote-supplied CableName and subnets fields in the Custom Resource Definition. Because these free-form strings are incorporated into the connection configuration w...
CVE-2026-66786 Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...
cpanel-malware-cleaner-cve-2026
ЁЯЪи ╪г╪п╪з╪й ╪к┘Ж╪╕┘К┘Б cPanel ┘Е┘Ж ╪з┘Д╪и╪▒┘Е╪м┘К╪з╪к ╪з┘Д╪о╪и┘К╪л╪й тАУ ╪г╪п╪з╪й ╪е╪╡┘Д╪з╪н CVE-2026-41940 ╪г╪п╪з╪й ╪г┘Е┘Ж┘К╪й ╪о┘Б┘К┘Б╪й ┘И┘В┘И┘К╪й ┘Д╪з┘Г╪к╪┤╪з┘Б ┘И╪е╪▓╪з┘Д╪й ┘И┘Е┘Ж╪╣ ╪з┘Д╪е╪╡╪з╪и╪й ╪и╪з┘Д╪и╪▒┘Е╪м┘К╪з╪к ╪з┘Д╪о╪и┘К╪л╪й ╪з┘Д┘Ж╪з╪к╪м╪й ╪╣┘Ж ╪л╪║╪▒╪з╪к cPanel ╪з┘Д╪г╪о┘К╪▒╪й ╪и┘Е╪з ┘Б┘К ╪░┘Д┘Г CVE-2026-41940. ЁЯФе ╪з┘Д┘Е┘К╪▓╪з╪к ╪з┘Г╪к╪┤╪з┘Б ┘И╪е╪▓╪з┘Д╪й ╪з┘Д╪и╪▒┘Е╪м┘К╪з╪к ╪з┘Д╪о╪и┘К╪л╪й ┘И╪▒┘И╪и┘И╪к╪з╪к ╪з┘Д╪┤╪и┘Г╪з╪к botnets ┘И┘И┘К╪и ╪┤┘К┘Д webshells ╪е╪╡┘Д╪з╪н ╪з┘Д╪л╪║╪▒╪з╪к...
cve-2025-55182
ЁЯЫбя╕П React2Shell CTF ЁЯЪА React2Shell-CTF рдореЗрдВ рдЖрдкрдХрд╛ рд╕реНрд╡рд╛рдЧрдд рд╣реИ, рдпрд╣ рдПрдХ Dockerized рд╡рд╛рддрд╛рд╡рд░рдг рд╣реИ рдЬрд┐рд╕реЗ React2Shell CVE-2025-55182 рдХрд╛ рд╢реЛрд╖рдг рдХрд░рдиреЗ рдХрд╛ рдЕрднреНрдпрд╛рд╕ рдХрд░рдиреЗ рдХреЗ рд▓рд┐рдП рдбрд┐рдЬрд╝рд╛рдЗрди рдХрд┐рдпрд╛ рдЧрдпрд╛ рд╣реИред React2Shell рдПрдХ рдЧрдВрднреАрд░ рднреЗрджреНрдпрддрд╛ рд╣реИ рдЬреЛ React-рдЖрдзрд╛рд░рд┐рдд рдЕрдиреБрдкреНрд░рдпреЛрдЧреЛрдВ рдХреЛ рдкреНрд░рднрд╛рд╡рд┐рдд рдХрд░рддреА рд╣реИред рдпрд╣ рд░рд┐рдкреЙрдЬрд╝рд┐рдЯрд░реА рдПрдХ рд╕реБрд░рдХреНрд╖рд┐рдд, рд╕реНрдерд╛рдиреАрдп рд░реВрдк рд╕реЗ...
MAL-2026-15824 Malicious code in @stellarshift/token-units (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...
MAL-2026-15823 Malicious code in @stellarshift/evm-address-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...
Malicious code in @stellarshift/evm-address-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ad9957f1e31e5afe261cb73c0c5b76ff23a86b23ebae0704e7e2934be79979 The package declares a postinstall script that invokes syncRemoteManifest in lib/runtime/manifest-sync.js. The destination URL is not present in...
Malicious code in @stellarshift/chain-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932d9a57667edad733439fadfc1754573429369cb8e65fe094c7bed1ed81c5e6 The package's postinstall lifecycle script fetches and executes arbitrary code from a remote URL that is stored XOR-encoded in endpoint-registry.json...
Malicious code in @stellarshift/token-units (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4433d82919da9c0972986247dd611eae3997b28fd54726ffbf9c48147c05211 Package advertises BigInt token-unit conversion helpers parseUnits/formatUnits but declares a postinstall hook scripts/postinstall.js that invokes...
Malicious code in @stellarshift/abi-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebef764845634817dcc9905a146c3ba898707dcc9937ebfe0060a4f10852d27 On npm install, the package's postinstall hook resolves a URL that is stored as an XOR-encoded integer array in endpoint-registry.json self-labeled...