CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - 交互式shell HTTP劫持 + POST + AES-256-CBC/BASE64 检测 -dnslog DNSLog无回显检测 Nuclei -poc 漏洞回显检测 利用 -exp 交互式shell base64回显 -exp2 交互式shell HTTP劫持 + POST + Base64 -exp3 交互式shell HTTP劫持 + POST + AES-256-CBC burpsuite...

Security Bulletin: IBM Edge Data Collector uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035

Summary IBM Edge Data Collector Component uses uuid-8.3.2.tgz, uuid-9.0.1.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026-42043, CVE-2026-42044. This...

CVE-2026-42033

Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can a silently intercept and modify every JSON response before the...