openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

CVE-2026-102256

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

EUVD-2026-94326

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

The SonicWall SMA1000 appliance is affected by a Zip Slip vulnerability (CWE-22) within the Appliance Management Console (AMC) interface. A post-authentication attacker can use a specially crafted archive to extract files outside the intended destination directory, leading to remote code executio...

CVE-2024-43363

CVE-2024-43363 Script di exploit per CVE-2024-43363 Questo script Python è progettato per verificare se un'istanza Cacti è vulnerabile a CVE-2024-43363, una vulnerabilità di Remote Code Execution RCE causata da log poisoning. Come funziona la vulnerabilità: Log Poisoning: un attaccante inietta...

CVE-2023-25581

Questo script Python dimostra lo sfruttamento della vulnerabilità CVE-2023-25581 in pac4j-core. La vulnerabilità consente a un attaccante di eseguire codice arbitrario RCE deserializzando dati codificati in Base64 creati malevolmente. Prerequisiti Prima di eseguire lo script, assicurati di avere...

CVE-2022-22965

spring4shell ⭐ un'implementazione in Python di CVE-2022-22965 che fornisce all'utente un prompt nello stile di una sessione ssh. lo script è progettato per essere facile da capire ed eseguire, con attenzione sia alla leggibilità che all'accessibilità, a seconda delle scelte dell'utente. Progettat...

CVE-2026-102256

A post-authentication OS Command Injection vulnerability (CWE-78) exists in the SonicWall SMA1000 appliance . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands under specific conditions, leading to remote code execution (RCE). The vuln...

CVE-2026-102256

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

CVE-2026-102256

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

EUVD-2026-94325

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS...

CVE-2026-76461

cve-id Dona Aiuta a mantenere questo progetto Se trovi utile questo progetto, considera di sostenerne la manutenzione continua tramite PayPal o ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Il dieci percento di ogni donazione viene devoluto al Kantha Bopha...

CVE-2019-9978-Social-Warfare-WordPress-RCE

🚀 CVE-2019-9978 – Social Warfare WordPress Plugin RCE ⚠️ HAFTUNGSAUSSCHLUSS: Dieses Repository dient nur zu Bildungs- und autorisierten Sicherheitstests. Verwenden Sie es nur auf Systemen, die Ihnen gehören oder für die Sie eine ausdrückliche schriftliche Genehmigung zum Testen haben. Unbefugter...

CVE-2025-54123

CVE-2025-54123 Hoverfly Command Injection a RCE PoC Panoramica Questo repository contiene uno script proof-of-concept PoC in Python per interagire con istanze Hoverfly affette da CVE-2025-54123. Lo script supporta: Autenticazione tramite credenziali nome utente/password Autenticazione tramite un...

Exploit for CVE-2026-81780

CVE-2026-81780 — Hash Form ≤ 1.4.2 Unauthenticated RCE !CVE...

nextjs-rce-incident-response

Risposta all'Incidente RCE in Next.js — CVE-2025-55182 Tipo: Risposta a Incidente in Produzione Live Vulnerabilità: CVE-2025-55182 — Deserializzazione non sicura dei Componenti Server React RCE Sistema Interessato: frontend Next.js + server di produzione remoto Ruolo: Tirocinante Cyber Security —...

CVE-2026-90847

Overview iuxset.cgi contains an authenticated remote code execution RCE vulnerability via file upload. It lives in the function that's invoked when iuxset.cgi is called with tmenu=camera and smenu=systemsetup, which maps to Camera Management → System Setup in the administrator web UI. Although it...

internet-of-vulnerable-things

Internet delle Cose Vulnerabili I risultati del mio piccolo elaborato sul tema dell'Internet delle Cose Vulnerabili. Abstract Questo documento fornisce una dimostrazione pratica di quanto sia insicura l'Internet delle Cose, hackingando un tipico dispositivo IoT. Sono state identificate diverse...