POC-CVE-2026-1357

CVE-2026-1357 WPvivid Backup & Migration RCE PoC Discovered by: Lucas Montes NiRoX Vulnerability: Unauthenticated Arbitrary File Upload leading to Remote Code Execution RCE CVE ID: CVE-2026-1357 CVSS: Critical9.8 Status: Patched in version 0.9.124 Overview This repository contains the analysis an...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 Apache Tomcat Tribes क्लस्टरिंग में EncryptInterceptor fail-open बाईपास, जो Java डिसीरियलाइज़ेशन के माध्यम से बिना प्रमाणीकरण के RCE की ओर ले जाता है। प्रभावित संस्करण: 11.0.19+, 10.1.53+, 9.0.116+। इनमें ठीक हुआ: 11.0.21, 10.1.54, 9.0.117। इनके द्वारा खोजा और रिपोर्ट किया गया:...

CVE-2026-34486

CVE-2026-34486 Bypass fail-open di EncryptInterceptor nel clustering di Apache Tomcat Tribes che porta a RCE non autenticata tramite deserializzazione Java. Versioni interessate: 11.0.19+, 10.1.53+, 9.0.116+. Corretto in: 11.0.21, 10.1.54, 9.0.117. Trovata e segnalata da Bartlomiej Dmitruk...

Security Bulletin: Multiple Vulnerabilities in pyOpenSSL bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the pyOpenSSL library, which is susceptible to a critical buffer overflow and a "fail-open" security bypass. A classic buffer overflow vulnerability exists when a user-provided cookie generation callback returns a value...