Exploit-CVE-2026-1357

Установка зависимостей pip3 install pycryptodome requests Базовый эксплойт python3 wpvivi.py http://target.com Кастомная веб-шелл python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Техническое объяснение: Null Byte Key: Когда RSA decrypt...

CVE-2026-23907

Уязвимость Path Traversal в Apache PDFBox Сводка по уязвимости Описание Пример кода ExtractEmbeddedFiles в Apache PDFBox не санирует имена файлов при извлечении встроенных файлов из PDF-документов. Злоумышленник может внедрить файлы с последовательностями обхода каталогов ../, чтобы записать файл...

detect-ransomware-filenames

Обнаружение имен файлов программ-вымогателей Этот пакет/скрипт отслеживает SMB-транзакции в поисках известных вредоносных имен файлов, которые, как известно, используют программы-вымогатели. Он работает поверх списков Anti-Ransomware File System Resource Manager, поддерживаемых здесь. Использован...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md CVE-2025-60787 Обнаружение: RCE в motionEye через внедрение конфигурации Неаутентифицированное удаленное выполнение кода в motionEye Неподвижные изображения - Имя файла изображения Пример PoC-полезной нагрузки: $touch /tmp/test.%Y-%m-%d-%H-%M-%S Когда motion перезапускается, команда...

CVE-2024-53677

POC от https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ Условия RCE 1. Отсутствие ограничений на опасные расширения файлов 2. Имя файла берется из параметров загрузки Поэтому смягчающе...

CVE-2025-65754

CVE-2025-65754 : XSS stocké dans Algernon 1.17.4 Description Algernon v1.17.4 est affecté par une vulnérabilité de Cross-Site Scripting XSS qui permet à des attaquants d'exécuter du code arbitraire via une charge utile malveillante dans un nom de fichier. Projet affecté : Algernon - 1.17.4...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Этапы эксплуатации для CVE-2020-27358 и CVE-2020-27359 CVE-2020-27358 Проблема была обнаружена в REDCap 8.11.6 – 9.x до версии 10. Функция CSV в мессенджере позволяющая пользователям экспортировать свои цепочки сообщений в CSV позволяет непривилегированным...

gin-vulnerable

gin-vulnerable Consommateur de démonstration épinglé à github.com/gin-gonic/gin v1.7.0 vulnérable à CVE-2023-29401. Le gestionnaire /download/:filename transmet directement l'entrée utilisateur à Context.FileAttachment — le modèle de condition d'exploitation qu'Endor signale comme exploitable...

POC_CVE-2024-10829

POCCVE-2024-36420 Laboratoire de reproduction locale et brouillon de template nuclei pour CVE-2024-36420 affectant Flowise. Summary CVE-2024-36420 est une lecture arbitraire de fichier dans Flowise causée par l'utilisation non assainie du paramètre de corps fileName dans : POST...

CentOS Linux 8.4 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.4:CLSA-2026:1777396606)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777396606 advisory. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer...

CentOS Linux 8.5 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS8.5:CLSA-2025:1756409018)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1756409018 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

CentOS Linux 8 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS-STREAM8:CLSA-2025:1756489732)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1756489732 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows...

CVE-2026-101127 Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4

Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and detected MIME type, but stores the attacker-supplied original multipart filename verbatim in...

CVE-2026-101127

The Joomla Extension - balbooa.com (specifically Balbooa Forms ) is vulnerable to an unauthenticated stored Cross-Site Scripting (XSS) in versions prior to 2.4.3.4 . The root cause is that the public form upload endpoint validates file extensions and MIME types but stores the attacker-supplied or...

CVE-2026-101127 Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4

Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and detected MIME type, but stores the attacker-supplied original multipart filename verbatim in...

EUVD-2026-89096

Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and detected MIME type, but stores the attacker-supplied original multipart filename verbatim in...

PT-2026-102706

Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.4 Description An unauthenticated stored Cross-Site Scripting XSS issue exists in the public form upload endpoint. While the endpoint validates file extensions and MIME types, it stores the original multipa...

CVE-2026-101082

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

EUVD-2026-88375

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-101082 PMWeb downloader.aspx path traversal

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...