magnus_billing_7.3.0_RCE_CVE-2023-30258

magnusbilling7.3.0RCECVE-2023-30258 magnus billing 7.3.0には、icepay.phpリソースのパラメータ"democ"にリモートコード実行の脆弱性があります。この脆弱性により、クエリをエスケープして任意のコマンドを実行できます。 脆弱なコード root@kitploit: if isset$GET'democ' if strlen$GET'democ' 5 exec"touch " . $GET'democ' . '.txt'; else exec"rm -rf .txt";...

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

CVE-2026-18351

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

EUVD-2026-75229

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

CVE-2026-84063

BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of file with dangerous type. If this vulnerability is exploited, an arbitrary file may be uploaded by an attacker who can log in to the product, potentially allowing arbitrary PHP code to be executed may be caused...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response

A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI 与 RCE 漏洞利用 信息 root@kitploit: 漏洞标题: Apache HTTP Server 2.4.49 - 路径遍历与远程代码执行（RCE） 漏洞作者: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz 厂商主页: https://apache.org/ 版本: 2.4.49 测试环境: 2.4.49 CVE : CVE-2021-41773 截图...

CVE-2024-27115-Exploit

SOPlanning 1.52.01 - 远程代码执行（RCE）（需认证） 漏洞利用详情 漏洞利用标题 ：SOPlanning 1.52.01（简易在线规划工具）- 远程代码执行（RCE）（需认证） 日期 ：2024年10月6日 漏洞利用作者 ：Ardayfio Samuel Nii Aryee 版本 ：1.52.01 测试环境 ：Ubuntu 描述 本仓库包含针对 SOPlanning 1.52.01 版本中远程代码执行（RCE）漏洞的利用代码。该漏洞允许已认证用户上传恶意 PHP 文件并在服务器上执行任意命令。 使用方法 前提条件 Python 3.x requests 库（使用 p...

cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 是一个严重的远程代码执行（RCE）漏洞，影响 Atlassian 的 Confluence Server 和 Data Center。 该漏洞的 CVSS 得分为 8.3，属于高严重性类别。攻击者可以通过精心构造的恶意 JavaScript 文件，利用此漏洞执行远程代码，无需用户交互。 然而，攻击者需要先登录到 Confluence 系统，并具备足够的权限以添加新的宏语言。 漏洞详情 漏洞类型 ：远程代码执行（RCE） 受影响版本 ：Confluence 5.2 版本及其后所有版本 攻击条件 ： 攻击者必须已经认证为...

CVE-2026-18351 Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

CVE-2026-18351

The Drag and Drop File Upload for Elementor Forms WordPress plugin is vulnerable to an unauthenticated arbitrary file upload in versions up to and including 1.6.0 . The root cause lies in the is_file_type_valid() function, which uses the attacker-controlled type parameter as regex keys within the...

EUVD-2026-75227

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

cve-2026-33937

CVE-2026-33937 - PoC de explotación RCE en Handlebars Descripción CVE-2026-33937 es una vulnerabilidad crítica de Ejecución Remota de Código RCE en Handlebars causada por el manejo inseguro de la entrada del Árbol de Sintaxis Abstracta AST. La vulnerabilidad permite a los atacantes inyectar códig...

kernel: ipv6: prevent possible UaF in addrconf_permanent_addr()

A flaw was found in the Linux kernel's IPv6 networking subsystem. Specifically, a Use-after-Free UaF vulnerability exists within the addrconfpermanentaddr function. This issue arises when the system attempts to access an IPv6 address after it has been freed, which could allow an attacker to cause...

kernel: rhashtable: clear stale iter->p on table restart

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

kernel: ipv6: mcast: Fix use-after-free when processing MLD queries

A flaw was found in the Linux kernel's IPv6 multicast mcast component. When processing Multicast Listener Discovery MLD queries, a pointer to the multicast group address is not correctly reloaded after certain packet manipulations. This can lead to a use-after-free vulnerability, potentially...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DBI is a database access Application Programming Interface API for the Perl...