CVE-2026-64638

XSS2Shell Alert PoC CVE-2026-64638 Proof of Concept für Pre-Auth Reflected XSS in WordPress Ein HTML-Proof-of-Concept in einer einzigen Datei für das Parser-Differenzial-XSS CVE-2026-64638 XSS2Shell im WordPress-Core. Es demonstriert die Ausführung von nicht authentifiziertem JavaScript im...

cve-2022-32224-rails

CVE-2022-3222 ActiveRecord Serialisierung Funktionsprüfung https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 https://api.rubyonrails.org/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethods.html...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 LFI/RFI-Eskalation zu RCE Testumgebung: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 Während einer Sicherheitsbewertung wurde das Vorhandensein von CVE-2014-2383 entdeckt. Dieses Dokument ist ein Proof-of-Concept und enthält keine Details der ersten Entdeckung, um die Privatsphäre des...

GO-2025-3567 ingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx

ingress-nginx admission controller RCE escalation in k8s.io/ingress-nginx. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

RHEL 8 : Satellite 6.12.1 Async Security Update (Critical) (RHSA-2023:0261)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0261 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...

Reddit: Blind SSRF to internal services in matrix preview_link API

A vulnerability was found in the previewlink functionality of Matrix software used in Reddit's new chat system. The endpoint allowed for partially blind SSRF, enabling attackers to send GET requests and exfiltrate data about internal services. This could potentially lead to service enumeration an...