cve-2026-4257

CVE-2026-4257 Dieser Exploit nutzt CVE-2026-4257 aus, eine Server-Side Template Injection SSTI-Schwachstelle im „Contact Form“-Wordpress-Plugin von Supsystic in den Versionen 1.7.36 und früher. Diese Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer, Remote Code Execution zu...

CVE-2024-27766

CVE-2024-27766 MariaDB v11.1 RCE via UDF — PoC modificado baseado em Ant1sec-ops/CVE-2024-27766. Visão geral...

CVE-2026-7393-RCE

Pizzafy Ecommerce System 1.0 – Upload di file senza restrizioni in savemenu consente l'esecuzione di codice in remoto Dettagli...

CVE-2026-7222-XSS

Cross-Site Scripting persistente XSS nel Coaching Management System porta alla compromissione dell'account Prodotto Coaching Management System in PHP Code-Projects.org https://code-projects.org/coaching-management-system-in-php-with-source-code/ Componenti interessati /modules/student/complaint.p...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — Analisi dell'Esecuzione Remota di Codice TCP/IP IPv6 📌 Descrizione del Progetto Questo progetto presenta una analisi tecnica e dimostrazione pratica della vulnerabilità critica CVE-2024-38063 , divulgata da Microsoft durante Patch Tuesday 13 agosto 2024. La vulnerabilità...

CVE-2012-1823

Iniezione di argomenti PHP CGI CVE-2012-1823 Descrizione sapi/cgi/cgimain.c in PHP prima della versione 5.3.12 e 5.4.x prima della 5.4.2, quando configurato come script CGI alias php-cgi, non gestisce correttamente le stringhe di query che mancano del carattere = segno di uguale, il che consente ...

CVE-2026-0848

CVE-2026-0848 — NLTK StanfordSegmenter: Esecuzione di Codice Arbitrario tramite Caricamento di JAR Non Attendibili -red?style=for-the-badge -brightgreen?style=for-the-badge Panoramica...

CVE-2026-5027

यह पोस्ट EQSTLab द्वारा प्रकाशित एक शोध लेख है। Yahia Hamza को धन्यवाद, जिन्होंने इस भेद्यता की रिपोर्ट और विश्लेषण किया। CVE-2026-5027 ★ CVE-2026-5027 Langflow पाथ ट्रैवर्सल / आर्बिट्रेरी फ़ाइल राइट PoC ★ विवरण CVE-2026-5027 : Langflow आर्बिट्रेरी फ़ाइल राइट भेद्यता विवरण: Langflow = 1.8.4 में ए...

CVE-2026-32238_RemoteCodeExecutionOpenEMR8.0.0

CVE-2026-32238 - Remote-Codeausführung in OpenEMR Schwachstelle CWE-78 : Unzureichende Neutralisierung von Sonderelementen bei der Erstellung eines OS-Befehls 'OS Command Injection' Das Produkt erstellt einen OS-Befehl vollständig oder teilweise mithilfe von extern beeinflussten Eingaben aus eine...

CVE-2022-3552

CVE-2022-3552 BoxBilling=4.22.1.5 - Remote Code Execution RCE Verwendung root@kitploit: python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...

CVE-2026-34197-Apache-ActiveMQ-RCE

Behebt das Problem, dass die Reverse-Shell fehlschlägt, weil der command nicht XML-escaped wurde...

cve-2025-55182-analysis

CVE-2025-55182 — Analisi RCE dei React Server Components Analisi di vulnerabilità di applicazioni web · M2 Cybersecurity · 2025 Autore: Niane Mohamed · LinkedIn Catena di sfruttamento end-to-end di una vulnerabilità di deserializzazione non sicura critica CVSS 10.0 in React Server Components, dal...

CVE-2024-3094

🚨 CVE-2024-3094 — XZ Utils बैकडोर 🧠 अवलोकन CVE-2024-3094 एक गंभीर आपूर्ति श्रृंखला समझौता है जो व्यापक रूप से उपयोग की जाने वाली XZ Utils संपीड़न लाइब्रेरी को प्रभावित करता है। एक दुर्भावनापूर्ण अभिनेता ने अपस्ट्रीम रिलीज़ में गुप्त बैकडोर डाल दिया, जिससे छेड़छाड़ किए गए liblzma के माध्यम से दूरस...

CVE-2025-25257

🚨 CVE-2025-25257 – FortiWeb SQLi to RCE Kritische SQL-Injection → Webshell-Ausführung Entdeckt und bewaffnet von 0xgh057r3c0n 🧠 Schwachstellenübersicht CVE-2025-25257 betrifft FortiWeb-Systeme, die den Endpunkt /api/fabric/device/status bereitstellen, bei dem die Eingabe des Authorization-Headers...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Unsichere Deserialisierung RCE Kritische Worker ➜ Master Remote-Codeausführung im Wazuh-Clustermodus Unsichere Deserialisierung in der Wazuh-Cluster-Kommunikation ermöglicht einem kompromittierten Worker-Knoten , eine Root-RCE auf dem Master-Knoten zu erreichen. 📌 Überbli...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - Iniezione di Argomenti CGI PHP su Windows "WorstFit" Panoramica CVE-2024-4577 è una vulnerabilità critica di esecuzione remota di codice nell'implementazione CGI di PHP su Windows. Bypassa la correzione della CVE-2012-1823 originale sfruttando la conversione delle code page...

Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14791 Malicious code in 3layerdipstackjsuvtk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7b60734ee5f3f5596286c56fd8a733d82214462041d72a5b539b63601542f3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackru7mfn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0881c571357484f968c509c3f05f0e3c49536125c0a71c5dc7e1efae558ef109 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackt3wr5f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4a05b3c271fb16cbc32b977d3ec79f995e775a5c1a3d1583387784a8d8e2ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...