CVE-2026-43598

Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution...

Apache Tomcat - Remote Code Execution

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the server via a specially crafted...

CVE-2025-66478-Exploit-Poc

Next.js CVE-2025-66478 PoC Английский | 한국어 Этот репозиторий содержит доказательство концепции PoC для воспроизведения и исследования уязвимости Next.js CVE-2025-66478. Он состоит из уязвимого приложения Next.js и скрипта эксплойта на Python для тестирования уязвимости. Что такое CVE-2025-66478?...

CVE-2022-22963-PoC

CVE-2022-22963 RCE PoC Минимальный пример для воспроизведения удаленного выполнения кода CVE-2022-22963 в org.springframework.cloud:spring-cloud-function-core. Эксплуатация Запуск сервера mvn spring-boot:run Выполнение запроса curl -X POST -H 'spring.cloud.function.routing-expression:...

MAL-2026-17638 Malicious code in css-jptvix-polyfill (npm)

[email protected] was published to npm on 2026-10-06 07:29 UTC by user naorya and was unpublished by npm on 2026-10-06 15:04 UTC after a malware report. It is described as a CSS polyfill but contains no polyfill: index.js is an empty module, registry-manifest.min.json maps Wix-internal...

Malicious code in css-jptvix-polyfill (npm)

[email protected] was published to npm on 2026-10-06 07:29 UTC by user naorya and was unpublished by npm on 2026-10-06 15:04 UTC after a malware report. It is described as a CSS polyfill but contains no polyfill: index.js is an empty module, registry-manifest.min.json maps Wix-internal...

Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911

Rocket.Chat: Автоматизированный неаутентифицированный захват учетной записи до RCE CVE-2021-22911 Полный неаутентифицированный PoC RCE для Rocket.Chat 3.12.1 CVE-2021-22911 Оригинальный PoC создан Enox. В настоящее время это работает только для учетных записей без 2FA. В ближайшее время я добавлю...

Rainstorm

BadBash — это инструмент эксплуатации RCE CVE-2014-6271. Базовая версия только проверяет HTTP CGI сайт и предоставляет обратную оболочку netcat на порту 1234. Разработчик : Andy Yang Версия : 0.1.0 Лицензия : GPLv3...

CVE-2026-102165

Affected Arista Wi-Fi access points are vulnerable to a stack-based buffer overflow (CWE-121) within the capture service . An unauthenticated attacker with network access to this service can send a crafted packet to cause a service crash or potentially achieve remote code execution . The exploit ...

EUVD-2026-93968

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...

CVE-2026-102167 Security Advisory 0197

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network...

CVE-2026-102165 Security Advisory 0198

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...

CVE-2026-102165 Security Advisory 0198

On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly used non-default streaming mode...

EUVD-2026-93967

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network...

CVE-2026-102167 Security Advisory 0197

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network...

CVE-2026-102167

A memory corruption vulnerability exists in the wired uplink network endpoints of affected Arista Wi-Fi access points . This flaw, categorized as a stack-based buffer overflow (CWE-121), allows an unauthenticated attacker positioned on the same network segment as the wired uplink to crash the sen...

CVE-2026-102163

Affected Arista access points with the Wireless Intrusion Prevention System (WIPS) active are vulnerable to a flaw where an unauthenticated attacker in radio frequency (RF) proximity can send a crafted frame . This action can crash the sensor service , leading to the disablement of WIPS monitorin...

EUVD-2026-93965

On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...

CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker ca...

CVE-2026-106445

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker ca...