CVE-2025-49132

CVE-2025-49132 概念验证 PoC 本仓库包含针对 CVE-2025-49132 的概念验证 PoC，该漏洞是 Pterodactyl Panel 1.11.11 之前版本中存在的一个严重未认证远程代码执行 RCE 漏洞。 漏洞详情 CVE ID ：CVE-2025-49132 严重性 ：10.0（严重）- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 受影响版本 ： --os --traversal-level 命令示例 root@kitploit: python CVE-2025-49132-PoC.py test...

CVE-2024-4577

PHP-CGI Windows平台远程代码执行漏洞CVE-2024-4577 简介 PHP是Hypertext Preprocessor超文本预处理器的缩写，现是一种广泛使用的开源的脚本语言，它特别适合Web开发和嵌入HTML中，使用起来很简单。 CGI，英文叫做公共网关接口，就是Apache在遇到PHP脚本时会将PHP程序提交给CGI应用程序php-cgi.exe解释，解释之后的结果返回给Apache，然后再返回给相应的请求用户。 漏洞描述...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE エクスプロイト HTB Season 10 - Pterodactyl マシン Writeup 概要 ターゲット: Pterodactyl HTB マシン 中程度の難易度 CVE: CVE-2025-49132 重要度: Critical CVSS 9.8 攻撃タイプ: 認証なしのリモートコード実行 影響を受けるバージョン: Pterodactyl Panel v1.11.11 このエクスプロイトチェーンは以下の組み合わせです: 1. Path Traversal - ロケール翻訳システムにおけるパストラバーサ...

CVE-2026-73635

A flaw was found in Apache Struts. An unauthenticated remote client can exploit a vulnerability where the framework's localized-text caches grow without bound. This occurs when no fixed locale is configured, and the locale for text lookups is derived from the incoming request. This can lead to th...

CVE-2025-49132-Pterodactyl-Panel-RCE

CVE-2025-49132 — Pterodactyl Panel 安全研究与教育分析 概述 本项目记录了与 CVE-2025-49132 相关的研究，该漏洞影响 Pterodactyl Panel。 目的：安全研究、教育、防御意识 仅在受控环境中使用 不 促进未经授权的利用 漏洞摘要 CVE 编号： CVE-2025-49132 受影响产品： Pterodactyl Panel 影响： 远程代码执行（RCE） 攻击向量： 区域设置处理中的输入验证缺陷 影响 如果成功利用，此漏洞可能导致： 远程命令执行 权限提升 应用程序完全被攻陷 可能接管服务器 技术细节（概要） 输入验证不当...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — 教育 PoC -6f42c1 仅供授权测试和防御学习使用。 本仓库仅适用于受控的实验环境（例如 CTF/HTB 风格的环境），在此环境中你拥有目标的所有权或已获得 明确的书面授权 进行测试。 背景 本仓库包含一个教育性 Python 概念验证 pterodactylrce.py，针对影响 Pterodactyl Panel 版本 1.11.11 之前 的真实漏洞。在存在漏洞的配置下，未认证攻击者可能通过 /locales/locale.json 端点，利用对 locale 和 namespace...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE 漏洞利用 HTB 第十季 - Pterodactyl 机器 Writeup 概述 目标： Pterodactyl HTB 机器（中等难度） CVE： CVE-2025-49132 严重性： 严重（CVSS 9.8） 攻击类型： 未认证远程代码执行 影响范围： Pterodactyl Panel 远程代码执行 方法 1：使用提供的 exploit.sh root@kitploit: chmod +x exploit.sh 获取用户 flag ./exploit.sh flag 执行命令 ./exploit.sh...

POC-CVE-2024-38820

CVE-2024-38820 概念実証 概要 このプロジェクトは、CVE-2024-38820 を実証します。これは、Spring Framework の DataBinder における脆弱性で、ロケール依存の大文字小文字変換の問題により disallowedFields 保護をバイパスすることを可能にします。 脆弱性の詳細 CVE ID : CVE-2024-38820 影響を受けるコンポーネント : Spring Framework DataBinder 根本原因 : String.toLowerCase の動作がロケールによって異なる 影響 :...

Astra Linux – Vulnerability in node-moment

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability affects users of Moment.js on npm server versions between 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch the moment locale...

CVE-2026-78180

A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modificati...

CVE-2026-78180 alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution

A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modificati...

CVE-2026-78180 alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution

A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modificati...

EUVD-2026-64702

A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modificati...

CVE-2026-78180

alibaba-fusion next (up to version 1.27.34) is affected by a prototype pollution vulnerability in the deepMerge component, specifically in the ConfigProvider.getContextProps function within components/dialog/index.tsx. By manipulating the locale argument, an attacker can improperly control object...

Apache Struts 6.x < 6.11.0 / 7.x < 7.3.0 Multiple Vulnerabilities (S2-072) (S2-074)

The version of Apache Struts installed on the remote host is 6.0.0 prior to 6.11.0, or 7.0.0 prior to 7.3.0. It is, therefore, affected by multiple denial of service vulnerabilities, as referenced in the S2-072 and S2-074 advisories: - When an application is configured to populate actions from a...

CVE-2026-58436

A flaw was found in Gitea. An unauthenticated remote attacker could exploit a quadratic-time algorithm in the ParseAcceptLanguage function, specifically within the Locale middleware. This vulnerability allows an attacker to send specially crafted requests, leading to excessive resource consumptio...

ANT-2026-5BD488PV · graphicsmagick · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude critical · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-5BD488PV: Stack-buffer-overflow in locale.c:257...

CVE-2026-73635

Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework's internal localized-text caches...

EUVD-2026-59604

Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework's internal localized-text caches...

CVE-2026-73635 Apache Struts: Unbounded growth of localized-text caches driven by the request locale

Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework's internal localized-text caches...