CVE-2026-92985

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to childprocess for...

CVE-2026-71538

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npmexecpath does not provide the npm CLI path, can construct a shell command containing an untrusted value from the --workspace...

CVE-2026-76834

b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901: the function param_check_serialized_array() fails to reject payloads using negative integer array keys . Unauthenticated attackers can submit crafted serialized PHP objects via POST to htsrv/call_plugin.php,...

CVE-2026-76834 b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in paramcheckserializedarray fails to reject payloads with negative integer array keys. Unauthenticated attackers can submit crafted serialized PHP objects via POST...

EUVD-2026-81681

b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in paramcheckserializedarray fails to reject payloads with negative integer array keys. Unauthenticated attackers can submit crafted serialized PHP objects via POST...

CVE-2026-76834 b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in paramcheckserializedarray fails to reject payloads with negative integer array keys. Unauthenticated attackers can submit crafted serialized PHP objects via POST...

CVE-2026-76834 b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key

b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in paramcheckserializedarray fails to reject payloads with negative integer array keys. Unauthenticated attackers can submit crafted serialized PHP objects via POST...

Undocumented-RCE-in-PLY

Ejecución Remota de Código No Documentada en PLY CVE‑2025‑56005 root@kitploit: CVE ID: CVE‑2025‑56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python Lex‑Yacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python Lex‑Yacc Affected Component: ply/yacc.py — LRTable.readpickle via...

rust-cve-2025-55182-scanner

Escáner CVE-2025-55182 Rust Un escáner de vulnerabilidades concurrente y de alto rendimiento escrito en Rust para detectar CVE-2025-55182 RCE en Server Actions de Next.js en múltiples objetivos. 🚀 Características ⚡ Implementación de alto rendimiento en Rust 🧵 Motor de escaneo multihilo ⏱ Sistema ...

CVE-2026-76461

CVE-2026-76461 Un laboratorio de Python intencionalmente vulnerable y solo local para aprender cómo la deserialización insegura de YAML puede convertirse en una vía de ejecución de código. Incluye tres niveles de dificultad, una aplicación de comparación parcheada, scripts de explotación, pistas,...

CVE-2024-47176

CVE-2024-47176 Escáner de vulnerabilidades para CUPS: CVE-2024-47176 El escáner masivo para la vulnerabilidad CVE-2024-47176 de CUPS es una herramienta especializada diseñada para detectar la presencia de la vulnerabilidad CVE-2024-47176 en múltiples sistemas que ejecutan el Sistema de Impresión...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Disclaimer: This tool is intended strictly for educational purposes and authorized penetration testing. Only use it against systems you have explicit permission to test. This is a modified version of zAbuQasem/gogs-CVE-2025-8110, adapted to work...

CVE-2026-40175

🚨 CVE-2026-40175 - Vulnerabilidad crítica en Axios Gadget de contaminación de prototipos → Ejecución remota de código y compromiso de la nube 📢 Resumen Axios — uno de los clientes HTTP más populares para JavaScript navegador y Node.js — contiene una vulnerabilidad crítica anterior a la versión...

CVE-2026-22692

CVE-2026-22692: Omisión crítica del sandbox de Twig mediante collect-mapInto que permite RCE/LFI/XXE October CMS Descripción general...

CVE-2025-55182-Scanner

🛡️ CVE-2025-55182 Scanner React2Shell Developed by:SainiON Hacks A standalone GUI tool to detect and demonstrate the React Server Components Remote Code Execution RCE vulnerability CVE-2025-55182 in Next.js applications. 📺 Demo & Tutorial Watch the full breakdown and tool demonstration on my...

CVE-2025-55182

🚨 NextRce — CVE-2025-55182 Next.js / React Server Components RCE NextRce is a security research tool demonstrating CVE-2025-55182 , a critical vulnerability in Next.js App Router applications using React Server Components RSC and Server Actions. This vulnerability allows an attacker to achieve...

GHSA-Q69G-4HCV-6JG4 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows

Summary A Windows-specific command injection vulnerability exists in @cyclonedx/cyclonedx-npm when the CLI is invoked with the --workspace option. User-supplied --workspace values can be passed to a shell command without proper neutralization on the Windows fallback execution path, enabling...

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows

Summary A Windows-specific command injection vulnerability exists in @cyclonedx/cyclonedx-npm when the CLI is invoked with the --workspace option. User-supplied --workspace values can be passed to a shell command without proper neutralization on the Windows fallback execution path, enabling...

struts2-tool

Struts2 漏洞检测与利用工具 s2tool 一个纯 Java 实现的 Struts2 S2-045 / S2-046（CVE-2017-5638）漏洞检测与利用工具。 检测模块覆盖 S2-045 / S2-046 两个漏洞， 利用模块提供命令执行、文件管理、信息获取、交互式 Shell、反弹 Shell、Webshell 上传等能力。 免责声明 ：本工具仅用于授权的安全测试、漏洞研究与教学目的。 严禁用于未授权的非法用途，使用者需自行承担一切法律责任。 功能总览...

CVE-2025-27636-RCE-in-Apache-Camel

CVE-2025-27636 – RCE en Apache Camel Exploit simple en Python para la RCE por inyección de cabeceras en Apache Camel CVE-2025-27636. Uso Ejecución de comandos en un solo paso root@kitploit: ┌──root㉿user-/run/…/user/2024/HTBox/CVE-2025-27636 └─ python3 CVE-2025-27636.py -t http://192.168.159.120 -...