1710 matches found
POC-WP-XSS2Shell-CVE-2026-64638
XSS2Shell — PoC de CVE-2026-64638 Preuve de concept éducative de la chaîne XSS2Shell CVE-2026-64638, vulnérabilité pré-authentification XSS → RCE dans WordPress Core découverte de manière autonome par pwn.ai et divulguée le 7 août 2026. Table des matières 1. Résumé exécutif 2. Avis légal 3...
CVE-2026-55241 Checkmate: Pre-auth Denial of Service via File Upload on Registration
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/src/api/routes/authRoutes.ts passes multipart...
CVE-2026-55241 Checkmate: Pre-auth Denial of Service via File Upload on Registration
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. Prior to 3.9.1, the public POST /api/v1/auth/register route in server/src/api/routes/authRoutes.ts passes multipart...
CVE-2026-42533
CVE-2026-42533 — перезапись при двухпроходном захвате в nginx two-pass capture clobbering Переполнение кучи до аутентификации + утечка информации в движке скриптов сложных значений nginx 0.9.6–1.30.3 / mainline ≤1.31.2; CVSS 9.2. Один корень — две поверхности эксплуатации: HTTP regex location +...
CVE-2025-55182-React2Shell-Exploit
Next.js React2Shell CVE-2025-55182 أداة استغلال أداة إثبات مفهوم لإظهار الثغرة الحرجة React2Shell CVE-2025-55182 / CVE-2025-66478 في بيئات الاختبار المحلية المصرّح بها فقط. ⚠️ تحذير بالغ الأهمية: استغلال نشط للاستخدام القانوني فقط : استخدمها حصريًا ضد أنظمة تمتلكها أو لديك إذن كتابي صريح لاختبارها...
CVE-2026-57517
Control Web Panel ≤ 0.9.8.1224 — من الحقن الأعمى لـ SQL إلى تنفيذ الأوامر عن بُعد المنفذ 2083 ← نقطة نهاية userRes عبر POST ← INTO DUMPFILE ← المنفذ 2031 ويب شيل → cwpsvc 🔴 نظرة عامة على الثغرة...
CVE-2026-42533-POC
CVE-2026-42533 Débordement de tampon sur le tas en pré-auth et fuite d'informations sur le tas dans nginx, causés par l'absence de sauvegarde/restauration de l'état des captures PCRE entre les deux passages du moteur de script. Une variable map basée sur une regex, évaluée entre deux références d...
CVE-2026-19586
CVE-2026-19586 is a pre-authentication OS command injection flaw in TP-Link Omada gateways running the OpenVPN Server feature, caused by insufficient validation of client-supplied data during connection establishment. CVSS 9.3 (Critical), network-reachable, no auth required. Exploitation requires...
EUVD-2026-63544
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...
CVE-2026-19586 Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...
CVE-2025-32433_PoC
CVE-2025-32433Erlang-OTP هذا السكربت أداة أمنية مخصصة مصممة لاختبار ثغرة حرجة قبل المصادقة في الأنظمة التي تشغل خوادم SSH المبنية على Erlang هذا السكربت أداة أمنية مخصصة مصممة لاختبار ثغرة حرجة قبل المصادقة في الأنظمة التي تشغل خوادم SSH المبنية على Erlang مثل تلك المستخدمة في الأنظمة المدمجة...
Atlassian_CVE-2022-26134
Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Le 30 mai 2022, une organisation nommée Volexity a identifié une vulnérabilité RCE non authentifiée score de 9,8 selon le NIST dans les éditions Confluence Server et Data Center d'Atlassian...
CVE-2019-0708
CVE-2019-0708 Часть, вызывающая «синий экран смерти» BSOD, была намеренно удалена! Уязвимость удаленного выполнения кода существует в службах удаленных рабочих столов Remote Desktop Services – ранее известных как терминальные службы Terminal Services – когда неаутентифицированный злоумышленник...
CVE-2026-69219
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...
RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation
Summary ValueReader.readBytes allocates a byte array sized by a wire-declared content length without validating it against actual frame data. A malicious AMQP peer triggers OOM by declaring a 2GB string/bytes field. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines...
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Summary ValueReader.readTable and readArray recursively call readFieldValue with no depth limit. A malicious AMQP peer can crash the client JVM by sending a deeply nested table structure. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines 139-155 and 237-249: java priva...
GHSA-93J5-89VC-PPH4 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Summary ValueReader.readTable and readArray recursively call readFieldValue with no depth limit. A malicious AMQP peer can crash the client JVM by sending a deeply nested table structure. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines 139-155 and 237-249: java priva...
CVE-2026-69220 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
CVE-2026-69220 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...