BiblioRCE

Ein Versehen in BiblioCraft, das eingeschränkte serverseitige Dateimanipulation ermöglicht. Diese Methode benötigt nur BiblioCraft! Nicht allzu viel Trickserei und keine anderen Mods sind erforderlich, um Codeausführung zu erreichen! CoreTweaks Der ursprüngliche Bericht über CoreTweaks ist hier z...

malicious-devfile-registry

Registry Devfile dannoso Il progetto contiene un Registry Devfile dannoso utilizzabile per sfruttare la CVE-2024-0402 in Gitlab. L'Exploit Uno stack nodejs:2.2.1 viene indicizzato per esporre il file archive.tar che sfrutta il problema di path traversal nella libreria registry-support precedente...

CVE-2026-7275-moodle

CVE-2026-7275-moodle PoC e documentazione per CVE-2026-7275 : Moodle Google Drive Repository repositorygoogledocs — Path Traversal / Arbitrary File Write che può portare a RCE sulle versioni di Moodle non ancora patchate. Disclaimer: Solo per ricerca di sicurezza autorizzata, audit e formazione...

CVE-2026-49049

CVE-2026-49049 — Helix3 JoomShaper Joomla Unauthenticated AJAX RCE Scanner Massenscanner/Verifizierer für CVE-2026-49049 : nicht authentifizierter AJAX-Handler im Helix3 Framework -Plugin für Joomla v1.0 – 3.1.0 , gepatcht in 3.1.1+. Nur autorisierte Tests. Verwenden Sie dies nur auf Systemen, di...

ezwinrar

ezwinrar Strumento Python che sfrutta la CVE-2018-20250 trovata dal team di CheckPoint : https://research.checkpoint.com/extracting-code-execution-from-winrar/ Modificando il campo filename del formato ACE, la cartella di destinazione cartella di estrazione viene ignorata e il percorso relativo n...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Script Shell per mitigare CVE-2021-41773, una vulnerabilità di Path Traversal e File Disclosure in Apache Installazione root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Utilizzo Fix completo e modalità consigliata per mitigare la...

CVE-2021-41773

CVE-2021-41773 Apache 2.4.49 Vérificateur de vulnérabilité de traversée de chemin Exemple Plateforme Linux & Windows...

CVE-2026-42048

CVE-2026-42048 CVE-2026-42048 Langflow Path Traversal / Eliminazione Arbitraria di Directory PoC https://github.com/user-attachments/assets/6e5481ff-e953-47a5-8870-70b30c6550de Descrizione CVE-2026-42048 : Vulnerabilità di Eliminazione Arbitraria di Directory in Langflow descrizione: Una...

CVE-2024-25293

PoC di esecuzione locale di codice MJML Una Proof-of-Concept per la vulnerabilità CVE-2024-25293. È stato scoperto che mjml-app v3.0.4 e 3.1.0-beta presentano una vulnerabilità di remote code execution RCE. In questo repository è presente un esempio di applicazione vulnerabile e un exploit...

vaultize_CVE-2024-36079

Informazioni sulla vulnerabilità La soluzione on-premise Vaultize DRM v.21.07.27 è vulnerabile al caricamento di file arbitrari. I file i cui nomi contengono parte del percorso assoluto del file system possono essere caricati a causa della mancanza di filtraggio dei nomi dei file. Quando si tenta...

CVE-2026-49049

Indagine sulla vulnerabilità CVE-2026-49049: Scrittura arbitraria di file non autenticata in JoomShaper Helix3 Joomla Il repository contiene materiali, analisi tecnica e Proof of Concept PoC per la vulnerabilità critica CVE-2026-49049 , individuata nel framework di template obsoleto Helix3 di...

CVE-2026-80700

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

CVE-2026-80690

CVE-2026-80690 affects the Linux kernel UFS (Universal Flash Storage) SCSI driver. The root cause is that the hba->rpmbs list is not initialized in ufshcd_alloc_host(), leading to a NULL pointer dereference in the device teardown path when ufs_rpmb_probe() fails. The fix is a list initializati...

CVE-2026-80687

CVE-2026-80687 is a deadlock vulnerability in the Linux kernel 's iommufd/viommu subsystem. The function iommufd_vdevice_alloc_ioctl() acquires idev->igroup->lock, then validates the driver's vdevice_size against the core structure size. On failure, a WARN_ON_ONCE guard jumps to out_put_ide...

CVE-2026-80687

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

EUVD-2026-67563

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

CVE-2026-80667

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete on devcom error mlx5mpeswwork returned without calling complete when mlx5laggetdevcomcomp returned NULL. A caller that queued the work and waited on mpesww-comp would block indefinitely...

EUVD-2026-67533

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

CVE-2026-80657

CVE-2026-80657 affects the Linux kernel driver accel/amdxdna . The root cause is a NULL pointer dereference : the management mailbox channel cleanup helpers xdna_mailbox_free_channel() and xdna_mailbox_stop_channel() can be invoked from error-handling paths after the management channel (mgmt_chan...

CVE-2026-80650

CVE-2026-80650 affects the Linux kernel 's media: atomisp: gc2235 camera sensor driver. The root cause is incorrect error-path handling in gc2235_probe(): if media_entity_pads_init() fails, the probe routine calls gc2235_remove() which frees the device structure, but execution then falls through ...