CVE-2026-19477

A stack-based buffer overflow was identified in MCC Universal Library for Linux (uldaq) , a library used for MCC data acquisition on Linux, affecting version 1.2.1 and prior . The flaw can lead to information disclosure or arbitrary code execution with a local attack vector, low complexity, and n...

EUVD-2026-82395

There is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux uldaq. This may result in information disclosure or arbitrary code execution. This vulnerability affects MCC Universal Library for Linux uldaq v1.2.1 and prior versions...

CVE-2026-35616

🚨 CVE-2026-35616 - FortiClient EMS 认证绕过 🚨 不恰当的访问控制 | 预认证API绕过 已在野外被利用 — 2026年4月 📋 概述 CVE-2026-35616 是 FortiClient Enterprise Management Server EMS 版本 7.4.5 至 7.4.6 中的一个严重漏洞。 未认证的远程攻击者可以发送特制请求，绕过身份验证和授权检查，可能导致未经授权的代码执行或完全服务器沦陷。 Fortinet 公告 : FG-IR-26-099 🛠️ 仓库内容 文件| 描述 ---|--- CVE-2026-35616.yaml|...

Important: Red Hat Security Advisory: sudo security, bug fix, and enhancement update

An update for sudo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

sudo: Sudo: Policy bypass allows unauthorized program execution via execveat

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

Exploiting-Samba-on-Metasploitable-2

在Metasploitable-2上利用Samba漏洞 我的目标是从Kali Linux机器上使用metasploit利用一个众所周知的Samba漏洞（CVE-2007-2447）。这么做是为了通过反弹Shell入侵Metasploitable 2机器，访问其根目录。一旦访问到该目录，应该能够揭示/etc/shadow文件，从而证明已成功入侵。 1. Nmap扫描与目标枚举 首先，我识别每个主机的IP地址。 Metasploitable 2：192.168.1.3 Kali：192.168.1.4 接下来，我从Kali Linux机器ping Metasploitable...

nextjs-security-scanner

日文版请参阅 README.ja.md。 nextjs-security-scanner 用于检测 Next.js 项目中 CVE-2025-55182 React2Shell 与凭据泄露的 Bash 脚本。零依赖。 CVE-2025-55182：React2Shell CVSS：10.0（严重） | CWE-502：不可信数据反序列化 | SNORT SID：65554 通过 Next.js Server Components 中对不可信数据的反序列化实现未认证远程代码执行。攻击者向任意 Next.js Server Component 端点发送特制 HTTP...

WordPress Divi theme 5.0-5.11.1 - Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution vulnerability

Missing Authorization to Unauthenticated Arbitrary Registered Shortcode Execution vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Theme Divi versions 5.0-5.11.1...

EUVD-2026-82383

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...

CVE-2026-54239 FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...

CVE-2026-54239 FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...

CVE-2026-54239 FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt and WPE\FaustWP\Auth\decrypt in...

CVE-2026-52727 lxc-ci: Pacman keyring stored in archlinux image with a private key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-52727 lxc-ci: Pacman keyring stored in archlinux image with a private key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-52727

lxc-ci , the continuous integration and image-build scripts for LXC , shipped Arch Linux images (built from images/archlinux.yaml) that retained a shared pacman local-signing private key in /etc/pacman.d/gnupg. Every container or VM created from those images inherited the same key. An attacker wh...

EUVD-2026-82369

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

r2s

React2Shell R2S - CVE-2025-55182 测试工具 用于 CVE-2025-55182 漏洞评估的高级利用测试工具 功能 • 安装 • 使用 • 测试环境 • 法律声明 📖 什么是 R2S？ R2S React2Shell 是一款安全测试工具，旨在帮助安全研究人员、开发人员和渗透测试人员评估其 Next.js 应用程序是否存在 CVE-2025-55182 漏洞。 了解 CVE-2025-55182 CVE-2025-55182 是一个影响某些版本（例如 16.0.5）的 Next.js Server Actions 的关键漏洞。该漏洞允许攻击者通过未正确保护的...

CVE-2024-44346

CVE 披露：CVE-2024-44346 日期： 13-09-2024 摘要 在 Tosibox tbsetup.exe 4.0.0.0 版本中发现了一个漏洞，该漏洞可能允许本地权限提升。此问题已被分配标识符 CVE-2024-44346 。供应商已发布公告，提供了更多详情和修复步骤。 受影响的产品 供应商 ：Tosibox 产品 ：tbsetup.exe 版本 ：4.0.0.0 漏洞描述 Tosibox 被告知 Tosibox Key 软件中存在一个问题，该问题可能允许在运行 Tosibox Key 安装程序 tbsetup.exe...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 存储型 XSS 作者: Sergio 描述： PluckCMS v.4.7.18 的安装过程中存在多个跨站脚本（XSS）漏洞，本地攻击者可通过向安装过程（Website Name）中的 cont1 和 cont2 参数注入特制载荷来执行任意代码。 攻击向量： AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L POC： 在安装过程中，我们将 XSS 载荷输入到这两个参数中的任意一个，然后点击“下一步”，即可获得 XSS 弹窗。 XSS 载荷： root@kitploit: 在下图中，您可以看到在安装过程中执行该载荷的嵌入代码。...

cve-2026-4257

CVE-2026-4257 This exploits CVE-2026-4257, a Server-Side Template Injection SSTI vulnerability in the "Contact Form" Wordpress plugin by Supsystic in versions 1.7.36 and before. This vulnerability allows an unauthenticated attacker to achieve Remote Code Execution. The vulnerability exists in the...