CVE-2026-77137 SQL Injection in extension "Forms Export" (frp_form_answers)

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

EUVD-2026-65339

The extension fails to properly sanitize user input before using it in a database query. As a result, a low-privileged backend user can inject arbitrary SQL through a URL parameter within the "Forms Export" backend module. Exploitation requires a low-privileged backend user and read access to the...

EUVD-2026-65338

The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server...

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

TYPO3-EXT-SA-2026-027: SQL Injection in extension "Forms Export" (frp_form_answers)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-027...

TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-022...

CVE-2025-20384

SPLUNK CVE-2025-20384 嗯，我只是读了我朋友发给我的东西，然后开始胡乱敲一些蹩脚的菜鸟 javascript 代码 日志注入/伪造/投毒/混淆类型 POC 请阅读这篇文章 OWASP Log Injection TL;DR 寻找静态文件，传递它并附加一些随机参数 所以，我执行 curl -k...

log4j-docker-vaccine

Vacuna Docker para Log4j Una forma contenerizada de ejecutar la vacuna log4j ofrecida por Cybereason https://github.com/Cybereason/Logout4Shell Ponlo en marcha Clona este repositorio: root@kitploit: git clone https://github.com/jeffbryner/log4j-docker-vaccine.git Edita el archivo containers.env...

EUVD-2026-65328

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586

CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...

miasma-toolkit

Miasma / Shai-Hulud 工具包 用于 Miasma 蠕虫（ Mini Shai-Hulud 变种）的应急分析与检测/修复工具，该蠕虫将自启动载荷注入 AI agent / IDE 配置以及 npm/GitHub 仓库。 ⚠️ 免责声明——无担保。 这是一个社区防御工具包，按“现状”提供，不附带任何形式的担保（参见 LICENSE）。扫描器和 YARA 规则为只读，但 purge-history.sh 会重写 git 历史 ，.claude/ 中的钩子 将文件移至隔离区 ——两者都可能修改仓库。请先备份，了解每个工具的作用，并自行承担运行风险。...

CVE-2021-38149

CVE-2021-38149 Chikitsa Patient Management System 2.0.0 存储型跨站脚本（XSS） 在 Chikitsa Patient Management System 2.0.0 版本的多个页面中存在一个存储型跨站脚本（XSS）实例，该漏洞允许在用户浏览器中执行任意 JavaScript，从而可能使用户提升权限。 受影响页面： /index.php/admin/adduser /index.php/appointment/todos...

overkill

Overkill Overkill es un exploit para una vulnerabilidad parcheada que afecta a QNAP QTS. Debido a la forma en que QNAP divulga las vulnerabilidades, no estoy seguro de si este problema tiene un CVE o no. Sin embargo, probablemente fue parcheado en noviembre de 2020 y abril de 2021. El n-day fue...

CVE-2019-11043

Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix 漏洞简介 PHP-FPM 远程代码执行漏洞CVE-2019-11043 在长亭科技举办的 Real World CTF 中,国外安全研究员 Andrew Danau 在解决一道 CTF 题目时发现,向目标服务器 URL 发送 %0a 符号时,服务返回异常,疑似存在漏洞。 在使用一些有错误的Nginx配置的情况下,通过恶意构造的数据包,即可让PHP-FPM执行任意代码。 Example 和Ladon.exe放在同一目录,即可对C段或url.txt进行批量检测 root@kitploit: Lad...

LANs.py

LANs.py NOTA Ya no mantengo esto. Recomiendo encarecidamente usar bettercap en su lugar para necesidades ARP y MITM. Encuentra automáticamente los usuarios más activos de WLAN, luego espía a uno de ellos y/o inyecta HTML/JS arbitrario en las páginas que visitan. Envenena individualmente las tabla...

CVE-2019-11581

CVE-2019-11581 Vulnerabilidad de inyección de plantillas en Atlassian JIRA RCE Demostración python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Descarga de la versión vulnerable https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe PoC...

CVE-2022-1292

CVE-2022-1292 Descripción El script crehash no sanea adecuadamente los metacaracteres del shell para prevenir la inyección de comandos. Este script es distribuido por algunos sistemas operativos de una manera en la que se ejecuta automáticamente. En dichos sistemas operativos, un atacante podría...

CVE-2026-54161

CVE-2026-54161 PoC Resumen upsmon interpola el valor proporcionado por el servidor, controlable por el atacante,ups.alarm, sin sanitizar, en un comando de shell que ejecuta mediante system. Cuando un dispositivo monitoreado reporta un estado ALARM y el operador ha configurado NOTIFYCMD con EXEC e...

CVE-2022-42045

CVE-2022-42045 概述 我们发现 Zemana amsdk.sys 内核模式驱动程序（Zemana 反恶意软件 SDK 的一部分）中存在任意代码注入漏洞。该漏洞允许将任意代码注入到驱动程序代码段之一，然后以内核模式权限执行它（从管理员到内核模式的本地权限提升）。例如，此漏洞可用于禁用驱动程序签名强制，然后安装未签名的内核模式驱动程序。 详细信息 易受攻击的函数位于 amsdk.sys 的 .text 段起始偏移 0xBF60 处。该函数调用另一个位于偏移 0xD664 处的函数。偏移 0xD664 处的函数接收 4 个参数： 1. 目标地址：.hook 段中具有 RWX...