CVE-2025-55182-React2Shell

CVE-2025-55182-React2Shell xpl0ited by infrar3d Una vulnerabilidad de gravedad crítica 10.0 que afecta el uso del lado del servidor de React.js, registrada como CVE-2025-55182 en React.js y CVE-2025-66478 específicamente para el framework Next.js. Esta vulnerabilidad fue divulgada de manera...

cve-2010-2075-analysis

CVE-2010-2075 – Backdoor de Ejecución Remota de Código en UnrealIRCd Resumen Este repositorio documenta el análisis y la explotación de CVE-2010-2075, una vulnerabilidad de backdoor que afecta a UnrealIRCd 3.2.8.1. La vulnerabilidad se reprodujo en un entorno de laboratorio controlado utilizando...

CVE-2017-0144

🔵 EternalBlue（CVE-2017-0144） Microsoft SMBv1 严重远程代码执行漏洞 📌 概述 EternalBlue 是 Microsoft 服务器消息块版本 1 SMBv1 协议中的一个严重漏洞，允许远程攻击者在无需认证的情况下，在易受攻击的 Windows 系统上执行任意代码。 该漏洞利用工具由 NSA 开发，后于 2017 年被黑客组织 Shadow Brokers 泄露。它在被全球勒索软件活动（如 WannaCry 和 NotPetya ）武器化后广为人知。 🆔 漏洞详情 ⚠️ 影响 成功利用可能导致： 💀 以 SYSTEM 权限执行远程代码 🖥️...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: 检测到Windows OLE零点击RCE利用 此存储库记录了我对一则LetsDefend告警的调查，该告警涉及与CVE-2025-21298相关的Windows OLE零点击远程代码执行漏洞利用。其目的是展示从电子邮件分类到端点抑制的整个推理过程。 概述 LetsDefend在检测到发送至[email protected]的入站邮件中包含恶意RTF附件后生成了此告警。邮件来自[email protected]，主题为Important: Action Required for Upcoming Project...

CVE-2026-48017

CVE-2026-48017 — Ejecución remota de código en DbGate a través de la inyección de functionName Severidad : Alta CVSS 8.8 CWE : CWE-94 — Control inadecuado de la generación de código 'Inyección de código' Afectado : dbgate-api ≤ 7.1.8 corregido en 7.1.9 Aviso : GHSA-hv83-ggc4-v385 NVD :...

CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools 未经身份验证的远程代码执行 ⚠️ Oracle PeopleSoft PeopleTools 中的严重未认证远程代码执行 一个影响 Oracle PeopleSoft Enterprise PeopleTools 的漏洞，允许远程攻击者在无需身份验证的情况下入侵易受攻击的系统。 📖 概述 CVE-2026-35273 是一个影响 Oracle PeopleSoft Enterprise PeopleTools 的 Updates Environment Management 组件的严重漏洞。...

nextjs-security-update

nextjs-security-update Hay personas que están creando herramientas OSS para explotar las nuevas vulnerabilidades de Next.js. Esta es una herramienta para contraatacar: hace que sea extremadamente fácil actualizar todas tus aplicaciones Next.js en todas tus cuentas de GitHub. Utiliza la herramient...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift PoC de RCE con Reverse Shell Prueba de concepto de ejecución remota de código para CVE-2026-42945 , un desbordamiento de búfer en el heap del módulo ngxhttprewritemodule de NGINX. Este fork extiende el PoC público de activación con un listener de reverse shell integrado ...

abdal-cve-2026-60137

English | فارسی 🛡️ Exploits PoC de Abdal CVE-2026-60137 Abdal CVE-2026-60137 es un verificador defensivo de exposición para WordPress que detecta la sanitización insuficiente del parámetro authornotin en WPQuery, registrado como CVE-2026-60137. La vulnerabilidad puede permitir inyección SQL cuando...

CVE-2024-20154

CVE-2024-20154: Desbordamiento de pila NB-IoT SIB1-NB en la banda base MediaTek MT6769 Clasificación: CWE-121 — Desbordamiento de búfer basado en pila Gravedad: Crítica boletín de MediaTek · 8.8 Alta, Vector de ataque: Adyacente CISA-ADP Tipo: Ejecución remota de código — sin interacción del...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule 堆缓冲区溢出 描述 nginx Plus 和 nginx 开源版的 ngxhttprewritemodule 存在堆缓冲区溢出漏洞。当 rewrite 指令使用包含多个重叠 PCRE 捕获组的正则表达式（例如 ^/.$），且替换字符串引用多个捕获组（例如 $1&y=$2）时，静态路径缓冲区大小计算低估了所需空间，导致实际写入超过分配大小（Pool Slip）。 未经身份验证的攻击者可通过精心构造的 HTTP 请求触发此漏洞，导致工作进程发生堆缓冲区溢出。当 ASLR 被禁用或可被绕过时，存在代码执行的可能。 根因 文件 :...

Advanced Custom Fields Extended < 0.9.2 - Remote Code Execution

Advanced Custom Fields: Extended WordPress plugin 0.9.0.5 through 0.9.1.1 contains a remote code execution caused by unsafe use of calluserfuncarray in prepareform function, letting unauthenticated attackers execute arbitrary code remotely. id: CVE-2025-13486 info: name: Advanced Custom Fields...

SmarterMail - Unrestricted File Upload

Mail server contains an unrestricted file upload vulnerability allowing unauthenticated attackers to upload arbitrary files to any location, potentially enabling remote code execution. id: CVE-2025-52691 info: name: SmarterMail - Unrestricted File Upload author: DhiyaneshDK,watchTowr severity:...

Adobe Experience Manager Forms - Insecure Deserialization

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result in arbitrary code execution. An attacker could leverage this vulnerability to bypass security mechanisms and execute code. Exploitation of this issue does not require user...

Digiever DS-2105 Pro - Command Injection

Digiever DS-2105 Pro 3.1.0.71-11 contains a command injection caused by unsanitized input in timetzsetup.cgi, letting attackers execute arbitrary commands remotely, exploit requires no authentication. id: CVE-2023-52163 info: name: Digiever DS-2105 Pro - Command Injection author: rajesh-social-te...

VMware vCenter Server - Out-of-Bounds Write

vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...

Windows Server Update Service - Insecure Deserialization

Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...

n8n - Remote Code Execution via Expression Injection

n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

React Server Components - Remote Code Execution

React Server Components 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack contain a remote code execution caused by unsafe deserialization of payloads from HTTP requests to Server Function endpoints, letting...