cve-2022-32224-rails

CVE-2022-3222 ActiveRecord 序列化 行为验证 https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 https://api.rubyonrails.org/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethods.html https://github.com/rails/rails/pull/455...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI 漏洞升级为 RCE 测试环境：dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 在一次安全评估期间，发现了 CVE-2014-2383。本文档是一个概念验证，出于保护客户隐私的目的，不包含最初发现时的细节。不过，本文档中的内容确实模拟了该漏洞被利用时的环境。 发现 https://github.com/projectdiscovery/nuclei CVE-2014-2383 详情 A vulnerability in dompdf.php in dompdf before 0.6.1, when...

CVE-2026-64638

XSS2Shell Alert PoC（CVE-2026-64638） WordPress 预认证反射型 XSS 概念验证 针对 WordPress 核心中 CVE-2026-64638 （XSS2Shell）解析器差异型 XSS 的单文件 HTML 概念验证。演示通过精心构造的登录请求在 WordPress 源中执行未认证的 JavaScript。 漏洞信息 CVE ：CVE-2026-64638（XSS2Shell） 类型 ：预认证反射型 XSS（解析器差异：striptags 与 wpksespost） 攻击升级 ：可链接至 RCE（DOM clobbering → REST...

CVE-2026-48996

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rendered as innerHTML, allowing an...

GO-2025-3567 ingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx

ingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

RHEL 8 : Satellite 6.12.1 Async Security Update (Critical) (RHSA-2023:0261)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0261 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

Reddit: Blind SSRF to internal services in matrix preview_link API

A vulnerability was found in the previewlink functionality of Matrix software used in Reddit's new chat system. The endpoint allowed for partially blind SSRF, enabling attackers to send GET requests and exfiltrate data about internal services. This could potentially lead to service enumeration an...