Lucene search
+L

130 matches found

Kitploit
Kitploit
added 2026/08/27 4:38 a.m.2 views

vba2clr

TLDR: Ich experimentiere gerade mit verschiedenen Möglichkeiten, CLR-Assemblies .NET in VBA lokal und remote zu laden, indem ich AppDomain.ExecuteAssembly oder eine andere praktische Methode verwende, nachdem ich von VBA aus AccessVBOM umgangen habe der programmatische Zugriff auf das...

5.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/27 4:12 a.m.5 views

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox Product before V-9.2.1 存在 CSV 宏注入漏洞 产品描述: SearchBlox 为复杂组织简化企业搜索。SearchBlox 直观且智能的工具提供开箱即用的设置、安全加密和低总拥有成本。AI 驱动的解决方案优化搜索过程的每一步,显著提升参与度。SearchBlox 是金融服务、医疗保健和政府领域领导者的轻松选择。 描述: 9.2.1 版本之前的 SearchBlox 在 Featured Results 参数中存在 CSV 宏注入漏洞。 漏洞类型: CSV macro...

9.8CVSS8.9AI score0.01519EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 10:06 p.m.1 views

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - Exploit de Execução Remota de Código no XWiki PoC para CVE-2025-24893 – Execução Remota de Código via Macro do XWiki Inspirado pelo PoC original de Artemir Descrição Este é um exploit de Prova de Conceito PoC para CVE-2025-24893 , uma vulnerabilidade de Execução Remota de Código...

9.8CVSS8.4AI score0.99864EPSS
SaveExploits52References1
Kitploit
Kitploit
added 2026/08/26 9:57 p.m.2 views

xwiki-cve-2025-24893

XWiki SolrSearch RCE بدون مصادقة CVE-2025-24893 المساهمون الدفعة الرابعة من مدرسة القبعة البيضاء، الفصل 25: إم دو-يون @endusdksla الملخص يقوم XWiki بتحليل صيغة الويكي والماكرو وتفسيرها على الخادم ثم عرضها. المشكلة أن صفحة Main.SolrSearch مفتوحة للزوار، وفي نفس الوقت يتم تقييم المعامل text المُدخل...

9.8CVSS8.4AI score0.99864EPSS
SaveExploits52References1
NVD
NVD
added 2026/08/24 2:17 p.m.9 views

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

7CVSS0.00141EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/24 1:48 p.m.18 views

CVE-2026-78367

A macro injection vulnerability in RPM's rpmbuild tarball processing mode allows a remote attacker to achieve arbitrary code execution . The root cause is in the getTarSpec() function (tools/rpmbuild.cc), which passes an attacker-controlled tar member name to rpmExpand() within a %{basename:...} ...

7CVSS6.3AI score0.00141EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/24 1:48 p.m.7 views

EUVD-2026-64885

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

7CVSS6.2AI score0.00141EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/24 1:48 p.m.32 views

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

7CVSS0.00141EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/24 1:48 p.m.8 views

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

7CVSS6.3AI score0.00141EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/24 1:48 p.m.8 views

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

7CVSS6.3AI score0.00141EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/24 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-78367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an...

7CVSS6.3AI score0.00141EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/17 8:08 p.m.12 views

CVE-2026-71858

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, macros loaded from an attacker-controlled shortcuts.xml bypass the HMAC validation applied to UserDefinedCommands and can invoke Scintilla actions and the internal Open in Default Viewer command in an elevated Notepad++...

5.4CVSS5.6AI score0.00099EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-48553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the...

7.7CVSS5.9AI score0.00523EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/12 5:17 p.m.10 views

CVE-2026-48553

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor NRDP. When a custom variable defined on a host, service, or contact is referenced in a shell-executed command...

7.7CVSS0.00523EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/12 5:17 p.m.6 views

DEBIAN-CVE-2026-48553

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor NRDP. When a custom variable defined on a host, service, or contact is referenced in a shell-executed command...

7.7CVSS6.5AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/12 5:17 p.m.10 views

CVE-2026-48554

Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the comdata parameter. When a notification command references $NOTIFICATIONCOMMENT$ or $NOTIFICATIONAUTHOR$ in a...

7.7CVSS0.00523EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/12 5:17 p.m.12 views

UBUNTU-CVE-2026-48553

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor NRDP. When a custom variable defined on a host, service, or contact is referenced in a shell-executed command...

7.7CVSS6.4AI score0.00523EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/12 5:17 p.m.12 views

CVE-2026-48553

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor NRDP. When a custom variable defined on a host, service, or contact is referenced in a shell-executed command...

7.7CVSS6.3AI score0.00523EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/12 4:46 p.m.40 views

CVE-2026-48553 Nagios Core / XI Authenticated RCE via Custom-Variable Macro Injection

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor NRDP. When a custom variable defined on a host, service, or contact is referenced in a shell-executed command...

7.7CVSS0.00523EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/12 4:46 p.m.6 views

CVE-2026-48553

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor NRDP. When a custom variable defined on a host, service, or contact is referenced in a shell-executed command...

7.7CVSS6.4AI score0.00523EPSS
SaveExploits0References4
Rows per page
Query Builder