CVE-2026-81052

Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-81052

Dell ThinOS 10 , versions prior to 2605_10.2616 , is affected by a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this flaw to achieve arbitrary code execution , resulting in high impact to confidentiality, integr...

EUVD-2026-75560

Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-0303

Ejecución de Código Arbitrario en Checkov CVE-2026-0303 CVE: CVE-2026-0303 | CVSS Base: 6.3 | Severidad: Baja CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Vulnerabilidad de ejecución de código arbitrario en Checkov. Publicado por Palo Alto Networks el 9 de...

obsidian-note-toolbar-PoC

Ejecución de Código Arbitrario Dirigida por Frontmatter en Note Toolbar mediante la Cadena de Variables propNAME → js: Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-q8cw-3m8c-5pf2. Tras la asignación del CVE, este repositorio se renombra a...

EUVD-2026-75580

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. Infraestructura C2: servidores resilientes y redundantes El análisis de memoria con Process Hacker revela una lista completa de dominios utilizados por el Dropper GCleaner para la comunicación C2. Estos dominios están alojados en varias plataformas Scaleway, Render, Replit, etc., lo que indica...

CVE-2025-20393

CVE-2025-20393 📌 概述 CVE-2025-20393 是一个影响 Cisco Secure Email Gateway SEG 和 Cisco Secure Email and Web Manager SEWM 设备上运行的 Cisco AsyncOS 的 严重远程命令执行 RCE 漏洞。 该漏洞源于 Spam Quarantine 功能中的 输入验证不当 。未经身份验证的远程攻击者 可通过发送特制的 HTTP 请求来利用此漏洞，从而导致 以 root 权限执行任意命令 。 该漏洞被认定为 极其危险 ，原因如下： 无需身份验证 可通过网络进行利用 可实现系统完全沦陷...

CVE-2026-81803

Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...

rust-cve-2025-55182-scanner

Escáner CVE-2025-55182 Rust Un escáner de vulnerabilidades concurrente y de alto rendimiento escrito en Rust para detectar CVE-2025-55182 RCE en Server Actions de Next.js en múltiples objetivos. 🚀 Características ⚡ Implementación de alto rendimiento en Rust 🧵 Motor de escaneo multihilo ⏱ Sistema ...

Undocumented-RCE-in-PLY

Ejecución Remota de Código No Documentada en PLY CVE‑2025‑56005 root@kitploit: CVE ID: CVE‑2025‑56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python Lex‑Yacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python Lex‑Yacc Affected Component: ply/yacc.py — LRTable.readpickle via...

n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

Impact The expression compiler's sanitizer resolved through a dynamically-scoped this, so a class field named sanitize rebound it and reached the Function constructor. On the backend, any expression author could run code in the n8n process; in the editor preview, a member's expression could run a...

NPM: n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution

NPM: n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution vulnerability discovered by ? in WordPress Npm n8n versions 1.123.76...

EUVD-2026-74280

n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution...

CVE-2024-47176

CVE-2024-47176 CUPS漏洞扫描器：CVE-2024-47176 CVE-2024-47176 批量扫描器是一款专用工具，用于检测运行通用UNIX打印系统（CUPS）的多个系统中是否存在CVE-2024-47176漏洞。该漏洞影响CUPS，允许远程代码执行（RCE），可通过互联网打印协议（IPP）在端口631上利用。批量扫描器自动化了向目标系统列表发送精心构造的IPP请求并分析其响应以识别脆弱服务的过程。 使用方法： git clone https://github.com/aytackalinci/CVE-2024-47176.git python3...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — PoC de RCE en Gogs Silentium / HackTheBox Aviso: Esta herramienta está destinada exclusivamente a fines educativos y pruebas de penetración autorizadas. Úsela solo contra sistemas en los que tenga permiso explícito para probar. Esta es una versión modificada de...

CVE-2026-40175

🚨 CVE-2026-40175 - Vulnerabilidad crítica en Axios Gadget de contaminación de prototipos → Ejecución remota de código y compromiso de la nube 📢 Resumen Axios — uno de los clientes HTTP más populares para JavaScript navegador y Node.js — contiene una vulnerabilidad crítica anterior a la versión...

CVE-2026-22692

CVE-2026-22692: 通过 collect-mapInto 实现的关键 Twig 沙箱绕过，允许 RCE/LFI/XXE October CMS 概述 字段| 详情 ---|--- CVE 编号| CVE-2026-22692 严重性| 中等 CVSS:3.1 4.9 公告| GHSA-m5qg-jc75-4jp6 受影响产品| October CMS RCE, LFI, XXE 发现者| Lukasz Rybak CWE 分类 CWE-693: 保护机制失效 CWE-611: XML外部实体引用的不当限制 CWE-74: 下游组件输出中特殊元素的不当中和（'注入'） 摘要...

CVE-2025-55182-Scanner

🛡️ CVE-2025-55182 Scanner React2Shell Developed by:SainiON Hacks A standalone GUI tool to detect and demonstrate the React Server Components Remote Code Execution RCE vulnerability CVE-2025-55182 in Next.js applications. 📺 Demo & Tutorial Watch the full breakdown and tool demonstration on my...