CVE-2022-1388

CVE-2022-1388 Impacto Esta vulnerabilidad puede permitir a un atacante no autenticado con acceso de red al sistema BIG-IP a través del puerto de administración y/o direcciones IP propias ejecutar comandos arbitrarios del sistema, crear o eliminar archivos, o deshabilitar servicios. No hay...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

AsmResolver

AsmResolver AsmResolver는 PEPortable Executable 파일을 읽고, 수정하고, 재구성하기 위한 라이브러리입니다. Windows에서 기본적으로 실행되는 PE 이미지와 관리형.NET 메타데이터를 포함하는 이미지를 모두 지원합니다. AsmResolver는 MIT 라이선스로 배포됩니다. 주요 기능 AsmResolver에는 많은 기능이 있습니다. 아래는 주요 기능 중 일부를 나열한 목록입니다. PE 파일 생성, 읽기, 수정, 쓰기 및 패치. 섹션, 데이터 디렉터리 및 해당 해석에 대한 전체 액세스...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

MikroTik RouterOS 6.x < 6.49.21 / 7.0.x < 7.23.4 / 7.24.x < 7.24.2 Multiple Vulnerabilities

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 6.x prior to 6.49.21, or 7.0.x prior to 7.23.4, or 7.24.x prior to 7.24.2. It is, therefore, affected by multiple vulnerabilities : - RouterOS accepts a 'related' btest connection before...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Acceso a través del archivo wfufiledownloader.php, WordPress File Upload Solution poc, se produce una vulnerabilidad en la solución, se puede acceder a archivos de forma arbitraria y manipularlos o modificarlos...

BiblioRCE

Un descuido en BiblioCraft que permite la manipulación restringida de archivos en el lado del servidor. ¡Este método solo requiere BiblioCraft! No demasiado trucos y no se necesitan otros mods para lograr la ejecución de código. CoreTweaks El informe original centrado en CoreTweaks se puede...

CVE-2020-14974

CVE-2020-14974 A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver IObitUnlocker.sys, providing ability to unlock, delete, rename, copy, and move running files as a low privileged user. Resources...

CVE-2026-67279

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

CVE-2026-67279 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

EUVD-2026-72027

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

EUVD-2026-71774

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

PT-2026-86261

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

CVE-2026-73737

An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to manipulate user generated files, potentially leading to unauthorized changes in critical system configurations,...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...

CVE-2026-82629

CVE-2026-82629 affects the doUpload Endpoint in the file jeewx-boot-module-weixin/src/main/java/com/jeecg/p3/open/web/back/MyJwWebJwid3Controller.java of the jeecgboot jeewx-boot project (rolling release, up to commit 641ab52). Manipulating the File argument in the MyJwWebJwid3Controller.doUpload...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin 8.5-8.9.2 - Subscriber+ Arbitrary Image Move vulnerability

Subscriber+ Arbitrary Image Move vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Directorist versions 8.5-8.9.2...

CVE-2026-44517

A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...

mrtg security update

An update is available for mrtg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Multi Router Traffic Grapher MRTG monitors the traffic load on network...