PoC-Funcional---CVE-2026-45247-Mirasvit-Full-Page-Cache-Warmer-RCE-

CVE-2026-45247 - Mirasvit Full Page Cache Warmer pour Magento 2 - Injection d'objets PHP → RCE -red 📋 Description CVE-2026-45247 est une vulnérabilité critique d'Injection d'objets PHP PHP Object Injection dans l'extension Mirasvit Full Page Cache Warmer pour Magento 2 et Adobe Commerce. Un...

CVE-2024-49699

CVE-2024-49699 ARPrice = 4.0.3 — Внедрение PHP-объекта для аутентифицированных пользователей Subscriber+ Описание Плагин ARPrice для WordPress уязвим к внедрению PHP-объектов в версиях до 4.0.3 включительно через десериализацию недоверенного ввода. Это позволяет аутентифицированным злоумышленника...

2017-11882_Generator

CVE-2017-11882 Une vulnérabilité d'exécution de code à distance existe dans le logiciel Microsoft Office lorsque celui-ci ne parvient pas à gérer correctement les objets en mémoire. Un attaquant qui exploite avec succès cette vulnérabilité pourrait exécuter du code arbitraire dans le contexte de...

CVE-2023-36874

CVE-2023-36874 Доказательство концепции PoC Учебная и исследовательская реализация уязвимости CVE-2023-36874 , демонстрирующая недостаток локального повышения привилегий LPE в компоненте Windows Error Reporting WER. ⚠️ Отказ от ответственности Этот репозиторий и предоставленный исходный код...

CVE-2022-0185

CVE-2022-0185 Ce dépôt contient des exploits de démonstration pour CVE-2022-0185. Il y a deux versions ici. La version non-kctf version fuse cible spécifiquement Ubuntu avec la version de noyau 5.11.0-44. Elle ne donne pas directement un shell root, mais rend /bin/bash suid, ce qui mène à une...

CVE-2025-49113

CVE-2025-49113 – Exploit RCE Roundcube Webmail PoC Python CVE ID: CVE-2025-49113 Type d'exploit : Exécution de code à distance via injection d'objet PHP Application : Roundcube Webmail ≤ 1.5.9 et ≤ 1.6.10 Langage de l'exploit : Python Auteur : 00xCanelo Statut : Testé et fonctionnel sur des...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS RCE non authentifié via l'instanciation d'objets PHP Utilisation Détection de vulnérabilité. python CVE-2022-24990.py -u http://127.0.0.1:8080 Téléverser un webshell PHP. python CVE-2022-24990.py -a http://127.0.0.1:8080 Références...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amdgpu: The parameters of bo mapping operations need to be clarified. The parameters of amdgpuvmbomap/replacemap/clearingmappings should be verified in a single common place...

Astra Linux – Vulnerability in Firefox and Thunderbird

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have led to XSS attacks on websites that insecurely serve files without a content-type header. This vulnerabilit...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid accessing metadata when the pointer is invalid in objecterr. objecterr reports details about an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempti...

Astra Linux – Vulnerability in libxstream-java

XStream is a Java library for serializing objects to XML and back again. In XStream before version 1.4.16, there was a vulnerability where the processed stream at unmarshalling time contained type information that allowed new instances to be created based on those type information. An attacker...

USN-8867-1: Ceph vulnerability

It was discovered that the Ceph Object Gateway RGW SigV4 handler did not reject requests carrying x-amz- headers that were absent from the signed header set. An attacker holding a presigned URL could possibly use this issue to attach arbitrary unsigned x-amz- headers that RGW would honor, allowin...

USN-8867-1 ceph vulnerability

It was discovered that the Ceph Object Gateway RGW SigV4 handler did not reject requests carrying x-amz- headers that were absent from the signed header set. An attacker holding a presigned URL could possibly use this issue to attach arbitrary unsigned x-amz- headers that RGW would honor, allowin...

XStream-1

master: v-1.4.x: XStream Sérialisation Java vers XML, et retour Binaires Tous les artefacts binaires sont regroupés dans l'archive -bin. Elle inclut les jars XStream et toute autre bibliothèque utilisée au moment de la compilation, ou des extensions optionnelles d'exécution. Xpp3 est recommandé c...

CVE-2026-69836-EXP

CVE-2026-69836 Entra ID 인증되지 않은 RCE 개념 증명 개요 CVE-2026-69836은 신뢰할 수 없는 데이터의 안전하지 않은 역직렬화CWE-502로 인해 발생하는 Microsoft Entra ID의 심각한 인증되지 않은 원격 코드 실행 취약점입니다. 이 결함으로 인해 공격자는 인증, 사용자 상호 작용 또는 특별한 권한 없이 네트워크를 통해 임의 코드를 실행할 수 있습니다. 이 PoC는 패치 적용 환경에서 전체 RCE를 달성하는 익스플로잇을 입증하여, Microsoft 365, Azure 및 연결된 Saa...

CVE-2026-104809

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

CVE-2025-64459-Poc

CVE-2025-64459: Preuve de Concept d'Injection SQL dans l'ORM Django Vulnérabilité : Injection SQL via le déballage d'arguments de mots-clés QuerySet et Q. CVE ID : CVE-2025-64459 Découvert par : Moi Cyberstan Date de divulgation : 5 novembre 2025 🚨 Résumé Exécutif Ce dépôt contient une Preuve de...

CVE-2026-104809 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

CVE-2026-104809

The Mitel MiVoice Office 400 is vulnerable to a Shared Object Hijacking vulnerability. The issue stems from a loading mechanism that relies on a predictable module name without performing adequate integrity or origin verification. An attacker can place a malicious .so file in the expected path, w...

EUVD-2026-92301

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...