CVE-2026-85437

MOOS-IvP through version 24.8.1 is affected by multiple buffer overflow vulnerabilities in its IvP function string decoders (specifically in FunctionEncoder.cpp). The root cause is that decoders trust attacker-controlled length fields without validation, allowing an attacker to craft malicious en...

CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

CVE-2026-85427 MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

CVE-2026-85427

pAntler in MOOS essential-moos through 10.0.1 is vulnerable to remote code execution. An unauthenticated attacker can publish a crafted MISSION_FILE message to the MOOSDB containing malicious Run entries, which pAntler parses and executes via execvp() without any authentication validation. The vu...

CVE-2026-85427 MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

CVE-2026-85425

MOOS-IvP versions through 24.8.1 contain a remote code execution vulnerability in the SAY_MOOS variable handler of the iSay component. The handler passes unsanitized text to a shell command, allowing attackers to publish SAY_MOOS messages containing backticks or command substitution syntax to exe...

CVE-2026-18167

A stack-based buffer overflow in the EasyMesh module of the TP-Link Archer AX55 v4 allows a LAN attacker, when Mesh mode is enabled, to submit crafted input that crashes the easymesh daemon and may potentially achieve remote code execution . The vulnerability requires no prior authentication but ...

CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2025-30374

CVE-2025-30374 Taipy 中的类污染漏洞，可导致 RCE、XSS、DoS 和凭据泄露 摘要 在 Taipy v4.0.3（发现时的最新版本）中发现了一个类污染漏洞。该漏洞允许未经授权的攻击者覆盖 Taipy 服务端运行时上下文，进而导致 RCE、反射型 XSS、拒绝服务（DoS）以及敏感授权凭据（如 OpenAI 令牌）泄露等严重后果。 详情 背景 类污染（类似于 JavaScript 中的原型污染）是 Python 中一个相对较新的漏洞。它发生在攻击者能够在运行时意外覆盖模块的全局变量或某些类与函数的属性时。此问题归类于 CWE-915。 有关类污染的更多信息，请参阅：...

Explosive-As-Hell-MCS-Qualifer-Web-500

CVE-2025-55182 — Componentes del Servidor React RCE | Writeup de CTF Categoría: Explotación Web | Dificultad: Media | Vulnerabilidad: Ejecución Remota de Código → Escalada de Privilegios SUID TL;DR El endpoint de Componentes del Servidor React vulnerable a CVE-2025-55182 RCE → enumeró binarios SU...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE 双重释放 → 远程代码执行 已在 Rocky Linux 8.10、aarch64、Redis 8.6.2、jemalloc 5.3.0 上验证。 参考： https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR；稳定利用，适用于多种操作系统发行版和架构。 执行摘要 这是什么？ 这是 Redis 中的一个内存破坏漏洞，允许经过身份验证的攻击者以 Redis 用户身份运行任意命令。该攻击在现实世界中可行，且只需一条 RESTORE 命令——这是正常的...

CVE-2026-39987

CVE-2026-39987 - Marimo Pre-Authentication RCE CVE-2026-39987 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting Marimo, a reactive Python notebook environment. The vulnerability exists in Marimo's terminal WebSocket endpoint: root@kitploit: /terminal/ws The endpoi...

CVE-2026-69098_exploit

CVE-2026-69098 — ejecución remota de código por deserialización no autenticada en kotaemon Ejecución remota de código no autenticada en kotaemon = 0.12.0 mediante deserialización insegura en la comprobación de conexión de los ajustes de LLM. El fallo El controlador Gradio checkconnection de los...

CVE-2017-1000486

README - CVE-2020-1039909 Primefaces Remote Code Execution ============================================================ SOBRE LA VULNERABILIDAD CVE-2020-1039909 es una vulnerabilidad de ejecución remota de código RCE en el framework Primefaces JSF. La falla permite que un atacante ejecute comando...

CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher 未认证文件上传远程代码执行 isimage 与 extractfileextension 不匹配 → PHP 多语言文件上传 概述 CVE-2026-13001 是 Podlove Podcast Publisher WordPress 插件版本 ≤ 4.5.1 中的一个严重级别（CVSS 9.8）未认证 任意文件上传漏洞。 该漏洞利用了内部两个以不同方式解析文件扩展名的函数之间的不匹配： isimage 使用 basename，它包含查询字符串 → URL 显示为 ✅（有效图片）...

vRealizeLogInsightRCE

VMSA-2023-0001 POC for VMSA-2023-0001 affecting VMware vRealize Log Insight which includes the following CVEs: VMware vRealize Log Insight Directory Traversal Vulnerability CVE-2022-31706 VMware vRealize Log Insight broken access control Vulnerability CVE-2022-31704 VMware vRealize Log Insight...

CVE-2026-85050

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...