CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target root@kitploit: python poc.py https://192.168.32.130 + https://192.168.32.130 存在漏洞 博客: https://rustlang.rs/posts/simple-help/...

CVE-2022-26135

-CVE-2022-26135- CVE-2022-26135 CVE-2022-26135 poc https://www.xust.edu.cn/cve/index.jsp...

CVE-2026-53435

CVE-2026-53435 — Jenkins 反序列化 → 任意文件读取（PoC） CVE-2026-53435 的首个公开概念验证 ，在仅有安全公告、没有任何 PoC 公开发布时构建。 仅凭一行模糊的公告，在一个周五晚上耗时 约 8.5 小时 重建——不是通过手动编写利用代码，而是通过 引导 AI 遍历死胡同、转向和验证，直到获得可运行的攻击链。 PoC 读取控制器上的/etc/passwd——确认任意文件读取。...

CVE-2026-44252

creationtimestamp| type| source ---|---|--- 2026-08-21 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/wazuh-poc-pubblici-per-lo-sfruttamento-di-varie-vulnerabilita 2026-08-22 12:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtobot72lj2t...

CVE-2026-19846 TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-30965

creationtimestamp| type| source ---|---|--- 2026-08-13 09:00:07+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-30965.yaml 2026-08-14 00:00:09+00:00| confirmed|...

PT-2026-58886

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts with against the expected backup directory without path normalization, allowing parent-directory sequences during snapshot-mode...

CVE-2026-42048

creationtimestamp| type| source ---|---|--- 2026-04-27 10:45:50+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9whx-c884-c68q 2026-05-14 05:44:30+00:00| seen|...

Confluence Unauthorized RCE Vulnerability

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...

CVE-2019-0604

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka ‘Microsoft SharePoint Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2019-0594. Recent assessments: zeroSteiner at March 20,...

Metasploit Wrapup

Metasploit Hackathon We were happy to host the very first Metasploit framework open source hackathon this past week in the Rapid7 Austin. Eight Metasploit hackers from outside of Rapid7 joined forces with the in-house team and worked on a lot of great projects, small and large. @bcook started the...