648531 matches found
EUVD-2026-82381
NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a valid integer. Attackers can exploit...
CVE-2026-93337 NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a val...
CVE-2026-93337
NetworkManager-l2tp contains an improper input validation vulnerability in its handling of mru or mtu property values. A local user with VPN connection creation permissions can inject trailing non-numeric content after a valid integer, which is written verbatim into the pppd options file via writ...
CVE-2026-93337 NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection
NetworkManager-l2tp contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a valid integer. Attackers can exploit...
CVE-2025-55182-TOOLS
CVE-2025-55182 漏洞利用工具 CVE-2025-55182 综合利用/检测工具 由明一安全实验室 开发 功能 漏洞检测 : 批量扫描多个目标以发现漏洞 路径扫描 : 扫描常见的 Server Action 端点以发现易受攻击的路径 远程代码执行 : 在易受攻击的目标上执行系统命令 多种利用方法 : V1: vmrunInThisContext - 经典 RCE 方法 V2: $@ Chunk.prototype.then - Next.js 16.0.6+ 的高级 POC 安装 root@kitploit: go build -o cve-tool main.go 用法...
-Pluck-CMS-RCE-CVE-2023-50564
exploit.py 🐍💥 ⚠️ 法律/道德声明：此脚本仅用于授权环境 ✅（CTF、实验室、经过许可的渗透测试）。请勿在未经授权的系统上使用 ❌。 🧾 此脚本功能是什么？ exploitgreenhorn.py 自动化了针对 Web 面板的典型漏洞利用链： ✅ 登录面板（需要有效密码） ✅ 在内存中创建 ZIP（不写本地文件）📦 ✅ 将包含反向 shell 的 rev.php 放入其中 🔁🐚 ✅ 将 ZIP 作为“模块”上传到面板 🧩⬆️ ✅ 通过访问已上传的 PHP URL 触发 payload 🚀 📌 模块名随机生成以避免冲突（例如：abcdefg、xqpmzui 等）🎲 🧰 环境要求...
CVE-2026-54239
Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...
DEBIAN-CVE-2026-52727
lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...
CVE-2026-47252
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari variants interpolate a SQL-controlled UR...
CVE-2026-19477
There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...
Drupalgeddon2-CVE-2018-7600
🔥 Drupalgeddon 2 漏洞利用工具 — bixi.py 📖 简介 bixi.py 是一个针对 CVE‑2018‑7600 Drupalgeddon 2 漏洞的利用工具，该漏洞影响 Drupal 7 。 它通过直观的界面和预定义命令，实现对易受攻击的 Drupal 服务器的远程命令执行 RCE。 ⚠️ 免责声明 / 法律声明 本软件仅用于受控环境下的教育和研究目的。 仅允许在您拥有或获得书面许可的系统上使用 未经授权的使用是非法的 ，可能导致刑事后果 作者不对本工具的滥用行为承担任何责任 请始终遵守当地和国际网络安全法律法规 "能力越大，责任越大" 📋 功能特点 ✅ 自动利用...
CVE-2026-92993 Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...
CVE-2026-92993 Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...
EUVD-2026-82379
A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machinescript.go of the component Machine Script Feature. The manipulation of the argument params results in os command injection. The atta...
CVE-2026-92993
Dromara mayfly-go (up to 1.11.5 ) is vulnerable to an OS command injection via the RunMachineScript function in server/internal/machine/api/machine_script.go (Machine Script Feature). Remote attackers with the machine:script:run permission and tag access can achieve arbitrary command execution on...
CVE-2025-5548-Exploit-Development
CVE-2025-5548 - 漏洞利用开发实验室 本仓库记录了为漏洞分析和漏洞利用开发搭建工作环境的过程，并将其应用于一个实际的缓冲区溢出案例研究。 该项目围绕 FreeFloat FTP Server 1.0 构建，将其作为教学目标，以理解如何在受控环境中识别、分析和利用漏洞。 目标并非仅仅复现漏洞利用，而是记录完整的工作流程：准备环境、触发漏洞、分析崩溃、控制执行流程以及实现代码执行。 研究方法 工作分为两个主要部分： 环境 - 准备分析所需的工具和应用程序 漏洞利用 - 漏洞利用的分析与开发...
FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
CVE-2026-92945
A flaw was found in vm2. This vulnerability allows an attacker to bypass the module allowlist, a security feature designed to restrict access to certain software modules. The flaw occurs due to an incorrect string comparison method used in the isPathAllowedForModule function. By exploiting this, ...