44 matches found
CVE-2026-48907
CVE-2026-48907 教育性 PoC ⚠️ 本仓库仅用于教育和防御性安全目的。仅在你拥有或明确授权评估的系统上进行测试。不要将此项目用于第三方系统。 此 PoC 演示了 CVE-2026-48907，这是一个影响 Joomla Content Editor JCE 2.9.99.4 及以下版本的未认证 RCE 漏洞。 它利用了 JCE 配置文件导入功能中缺失的身份验证和校验， 它与 BIBIL0DAY 的原始 PoC 不同，因为它利用的事实是：JCE 的配置文件导入会将上传的配置文件暂存到 tmp/ 目录，且不进行身份验证，也不校验文件格式或内容。由于 Joomla 默认配置允许从...
CVE-2026-45774
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary...
CVE-2026-45774 compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary...
CVE-2026-45774
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary...
CVE-2026-45774 compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary...
Joomla JCE 2.9.99.4 Remote Code Execution
The JCE Joomla Content Editor profile import functionality lacks proper authentication and CSRF protections. An unauthenticated attacker can upload a crafted XML file containing PHP code; the file is stored in the /tmp/ directory and can be accessed via HTTP, leading to remote code execution...
CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import
Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...
Exploit for Improper Access Control in Widgetfactorylimited Jce
CVE-2025-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE e...
SUSE SLES15 Security Update : wireshark (SUSE-SU-2026:2437-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2437-1 advisory. This update for wireshark fixes the following issues - CVE-2026-5405: RDP dissector crash bsc1263767. - CVE-2026-5656: Profile impo...
Exploit for Improper Access Control in Widgetfactorylimited Jce
Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts...
SUSE-SU-2026:2437-1 Security update for wireshark
This update for wireshark fixes the following issues - CVE-2026-5405: RDP dissector crash bsc1263767. - CVE-2026-5656: Profile import crash and possible code execution bsc1263809...
Exploit for CVE-2026-48907
CVE-2026-48907 Educational PoC ⚠️ This repository is for ed...
TencentOS Server 4: wireshark (TSSA-2026:0340)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0340 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal
Summary The compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary check to ensure the resolved path stays within the trestle workspace. An attacker can craft a maliciou...
openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory. This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor...
OESA-2026-2226 wireshark security update
Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...
CVE-2026-5656
A flaw was found in Wireshark. A path traversal can occur when a malformed configuration profile is imported, resulting in a denial of service or potentially in code execution. Mitigation To mitigate this flaw, do not import configuration profiles from untrusted or unverified sources...
DEBIAN-CVE-2026-5656
Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution...