481227 matches found
EUVD-2026-61222
fastify vulnerable to X-Forwarded- spoofing under trustProxy hop-count...
CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...
CVE-2026-84838 Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...
CVE-2026-84838
CVE-2026-84838 is a command injection vulnerability in rpmuncompress , a component of the RPM package management toolset. The root cause is that archive filenames containing shell metacharacters are not properly escaped before being passed to shell command strings via popen() , allowing a local a...
CVE-2026-84838 Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...
EUVD-2026-70109
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...
EUVD-2026-70108
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-84837
A command injection vulnerability was identified in rpm , specifically in the gettarspec function used by rpmbuild -t*. The root cause is an unescaped tarball path or filename that, when containing shell metacharacters, allows an attacker to inject arbitrary commands. This is particularly relevan...
CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-84837 Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute
A flaw was found in the DBI component for Perl. This vulnerability allows an attacker to inject and execute arbitrary code by manipulating the Profile attribute of a DBI handle. When a string is assigned to this attribute, the component processes it without proper validation, enabling the executi...
CVE-2023-30253-exploit
CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 リモートコード実行 Dolibarr ERP/CRM v17.0.0 向けの PHP コードインジェクションエクスプロイトです。Website/CMS モジュールを介して、www-data ユーザーとして リバースシェル を取得できます。 ⚠️ 教育目的および許可を得た監査にのみ使用してください。 📑 目次 CVE-2023-30253 とは？ 脆弱性の仕組み 影響 このエクスプロイトの機能 要件 インストール 使用方法 実践例 エクスプロイトの詳細解説 軽減策 参考情報 🔍 CVE-2023-30253 と...
CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...
CVE-2026-84837
A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...
CVE-2026-33017-Exploit
CVE-2026-33017 - Langflow 未認証RCE root@kitploit: / \ | | \ ^ / ||||| 認証なしのexec、サンドボックスなし、希望なし。 Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope - execcompiledcode - 任意のコードがサーバープロセスとして実行される。ゲームオーバー。 インストール...
CVE-2025-24893
CVE-2025-24893 XWiki 원격 코드 실행 RCE 익스플로잇 CVE-2025-24893 에 대한 Python3 익스플로잇입니다. 이는 XWiki 플랫폼에 영향을 미치는 중요한 인증되지 않은 원격 코드 실행RCE 취약점입니다. 이 스크립트는 SolrSearch 매크로 구성 요소 내의 코드/표현식 인젝션 취약점CWE-95을 익스플로잇합니다. 이 결함으로 인해 공격자는 기본 운영 체제에서 임의의 Groovy/Java 코드를 실행할 수 있습니다. 이 익스플로잇은 Java의 Runtime.getRuntime.exec 함수의 ...
CVE-2026-24061
Docker Telnet 自動ログインラボ Telnet プロトコルネゴシエーション を実験するための軽量 Docker ラボです。CVE-2026-24061 エクスプロイトで説明されており、NEW-ENVIRON オプションを使用した自動ユーザー名インジェクションが含まれています。 このプロジェクトは、Telnet が環境ベースの認証バイパスをどのように処理するかを研究するための、分離されたクライアント・サーバー環境を作成します。 特徴 Docker Compose を使用した分離された2コンテナラボ カスタム Python Telnet クライアント 自動 USER...