CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...

RLSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

RLSA-2026:67280 Important: postgresql18 security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

nginx security update

An update is available for nginx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a...

unrealircd-backdoor-pentest-report

🛡️ Test d'intrusion de la backdoor UnrealIRCd Un projet de test d'intrusion contrôlé visant à identifier, exploiter et corriger la backdoor UnrealIRCd 3.2.8.1 CVE-2010-2075 dans un environnement d'entraînement isolé. Avertissement : Ce projet a été mené strictement à des fins éducatives et de test...

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Preuve de concept de vulnérabilité pour l'injection de commande RCE via le code PIN Bluetooth CVE-2026-6992, retravaillée à partir de https://github.com/utmost3/cve/issues/2. Je ne revendique pas la découverte de la vulnérabilité. Ceci est uniquement à des fins éducatives et de...

RLSA-2026:67491 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

CVE-2026-48939

CVE-2026-48939 — Эксплойт RCE iCagenda Joomla Загрузка произвольных файлов без аутентификации → Исполнение PHP-кода Обзор CVE-2026-48939 — это критическая уязвимость с рейтингом CVSS 10.0 в расширении календаря событий iCagenda для Joomla. Функция прикрепления файлов в форме регистрации на событи...

CVE-2026-45659

CVE-2026-45659 La désérialisation de données non fiables dans Microsoft Office SharePoint permet à un attaquant autorisé d'exécuter du code sur un réseau. ⚡ Utilisation simple Utilisez ce projet uniquement dans des environnements sûrs et autorisés tels que : Machines virtuelles locales Conteneurs...

Axis1.4-CVE-2019-0227

Axis1.4 CVE-2019-0227 Remote Command Execution Exploit Tool 📖 Vulnerability Description Apache Axis1.4 contains a remote command execution vulnerability CVE-2019-0227. When the enableRemoteAdmin property is set to true, an attacker can deploy a malicious service through the AdminService interface...

CVE-2025-55182-analysis

Analyse technique de CVE-2025-55182 : Mon parcours de recherche ⚠️ Avertissement important Ce document décrit mon processus de recherche personnel sur CVE-2025-55182, y compris les découvertes confirmées et les expériences que j'ai menées. Il représente un compte rendu honnête de mon enquête, y...

React2Shell_Rce-cve-2025-55182

RCE des Composants Serveur React – README Bonjour, j'espère sincèrement que tout va bien de votre côté de l'écran ! 😊✨ Description Les versions 19.0.0 , 19.1.0 , 19.1.1 et 19.2.0 de React Server Components, y compris react-server-dom-parcel, react-server-dom-turbopack et react-server-dom-webpack,...

CVE-2020-14008

CVE-2020-14008 - ManageEngine Applications Manager RCE Authenticated Remote Code Execution via Arbitrary File Upload in Zoho ManageEngine Applications Manager versions = 14720. Vulnerability Summary...

React2Shell-POC

Это доказательство концепции PoC для уязвимости React2Shell CVE-2025-55182 разработано исключительно в образовательных и исследовательских целях. Оно предназначено для демонстрации существования и потенциального воздействия конкретной уязвимости безопасности в контролируемой, авторизованной и...

Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs

Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...

Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs

Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...

CVE-2026-89308

An unauthenticated OS command injection vulnerability in the ping.php endpoint of TrxTimeATTENDANCE (a time-attendance application by Trexom ) allows remote attackers to execute arbitrary commands on the underlying operating system, achieving remote code execution (RCE) . The vulnerability is rat...

CVE-2025-7441

CVE-2025-7441 StoryChief 1.0.42 - Arbitrary File Upload Vulnerability CVE-2025-7441 - Technical summary Affected component: StoryChief WordPress plugin Vulnerability type: Unauthenticated arbitrary file upload Vulnerable endpoint: /wp-json/storychief/webhook Root cause: The plugin accepts a JSON...

CVE-2022-21445

Exploit CVE-2022-21445 - PoC Ce kit génère des charges exploitables payloads pour CVE-2022-21445, une vulnérabilité critique de désérialisation Java affectant Oracle WebLogic Server 12.2.1.x exécutant Oracle ADF Faces. La faille existe dans le composant RemoteApplicationResourceLoader et permet à...