mongo-express Remote Code Execution

mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...

bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork

CVE-2026-73678 — RCE non autenticata in MindsDB Minds Platform / MindsHub Cowork PoC per CVE-2026-73678 CVSS 3.1 10.0 Critico , AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Analisi completa: www.hunt-benito.com/blog/bring-your-own-key-cve-2026-73678-unauthenticated-rce-in-mindsdb-cowork/ Il sidecar FastA...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux-Kernel-posix-cpu-timers-Nicht-Leader-exec-Race-UAF Reproducer / PoC Trigger-Verifikation : Linux & Android NDK Dieses Repository dient ausschließlich der Verifikation des Patch-Status auf eigenen Testgeräten sowie zu Studienzwecken; es enthält keinerlei...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

FreeBSD -- hwpmc fails to detach PMCs during exec credential transitions

Problem Description: When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. Impact: An unprivileged local user who has attached PMCs to a process can...

FreeBSD-SA-26:56.hwpmc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:56.hwpmc Security Advisory The FreeBSD Project Topic: hwpmc fails to detach PMCs during exec credential transitions Category: core Module: hwpmc Announced:...

PT-2026-81351

Name of the Vulnerable Software and Affected Versions mcp-shell versions prior to 0.6.0 Description An OS command injection issue exists in the shell exec MCP tool. The software implements a secure mode that restricts command execution to an allowlist defined in security.yaml. However, the defaul...

cve-2026-33067

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei-Vorlage, die CVE-2026-33017 erkennt — eine nicht authentifizierte Remote-Code-Ausführungs-Schwachstelle in Langflow ≤ 1.8.2 , die über den öffentlichen flow-build-Endpunkt erreichbar ist: root@kitploit: POST...

win-exec-calc-shellcode

win-exec-calc-shellcode Piccola shellcode senza null byte che esegue calc.exe. Funziona su versioni x86 e x64 di Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, tutti i service pack. Dimensioni build 306...

CVE-2021-27877-PoC

CVE-2021-27877 Prova di concetto Questo repository contiene una versione modificata del modulo Metasploit originale di Rapid7 per CVE-2021-27877 che interessa l'agente Veritas Backup Exec. Durante i miei test, il modulo Metasploit originale identificava correttamente il target come vulnerabile, m...

nmap

nmap Questa libreria mira a fornire binding idiomatici di nmap per gli sviluppatori Go, al fine di rendere più semplice scrivere strumenti di security audit usando golang. Cos'è nmap Nmap Network Mapper è uno scanner di rete gratuito e open-source creato da Gordon Lyon. Nmap viene utilizzato per...

Unauthenticated-RCE-FUXA-CVE-2023-33831

RCE non authentifié FUXA CVE-2023-33831 La vulnérabilité affecte le composant de script de FUXA, en raison du manque de contrôle ou de nettoyage sur les entrées pouvant être contrôlées par les utilisateurs, permettant ainsi l'utilisation de méthodes dangereuses qui peuvent être exploitées pour...

ipyida

= IPyIDA IPyIDA è una soluzione basata esclusivamente su Python per aggiungere una console IPython a IDA Pro. Usa per aprire una finestra con una console Qt incorporata. Potrai quindi usufruire del completamento automatico di IPython, della guida in linea, del campo di input a caratteri...

Exploit for CVE-2026-64560

GhostLock CVE-2026-64560 — posix-cpu-timers UAF exploit for Vi...

PT-2026-79704

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in exec queue set hang replay state The q-replay state is blindly overwritten, which can potentially leak memory that was previously allocated by vmemdup user. Return an error if q-replay state is not empt...

CVE-2026-48750

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

EUVD-2026-63977

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

CVE-2026-48750 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

CVE-2026-48750

CVE-2026-48750 is a critical (CVSS 9.9) arbitrary file write vulnerability in Incus (system container and VM manager) prior to version 7.2.0 . The record-output parameter of the /instances/$name/exec endpoint follows a symlink at exec-output inside a crafted image, allowing an attacker to write a...

CVE-2026-48750 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...