EUVD-2026-92756

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization...

Ghost: Stored XSS via SVG Uploads Bypassing Sanitization

Impact SVG media thumbnails, and SVG images uploaded with a non-SVG file extension, were stored without sanitization. This allowed any staff user, including Contributors, to host scripts on the site's domain, possibly resulting in compromise of other staff users' admin sessions. Vulnerable versio...

EUVD-2026-92770

Ghost: Stored XSS via File Uploads on Local Storage...

CVE-2026-106575

A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...

wp-CVE-2017-5487-exploit

WordPress CVE-2017-5487 Exploit en Python Exemples d'utilisation : python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

CVE-2018-1049-POC

Ce script Python est une réimplémentation personnalisée du module d'exploitation Metasploit pour CVE-2018-1049, qui cible VyOS Vyatta via une vulnérabilité d'élévation de privilèges dans un script Perl mal utilisé via sudo. Vous avez besoin d'identifiants SSH valides. Vous obtenez les droits root...

CVE-2025-66177

⚠️ Avertissement / Déni de responsabilité En espagnol : Ce code et le matériel associé sont fournis uniquement à des fins éducatives, de recherche en sécurité et pour des tests de pénétration légitimes et autorisés. L'utilisation de ce script contre des cibles sans le consentement préalable et...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

DEBIAN-CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

GHSA-R5MF-4R5X-Q78F Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable

Summary The error page that Quasar CLI shows when an SSR or SSG render throws in development serializes every variable in process.env, every request header and every cookie into the HTTP response, and the dev server binds 0.0.0.0 by default. Any host that can reach the port therefore gets the...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit J'ai créé ce petit script pour le CVE-2025-24367 - De Cacti, un script conçu pour obtenir un webshell grâce à la vulnérabilité de cacti dans sa version 1.2.28. Utilisation du script : python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user...

CVE-2026-106575

The open-source image manipulation library ImageMagick is vulnerable to a resource exhaustion issue in versions prior to 7.1.2-31 . A crafted Magick script can cause an opened file pointer to remain unclosed, which allows repeated processing to exhaust available file descriptors . This vulnerabil...

EUVD-2026-94394

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed in version 7.1.2-3...

CVE-2015-1635_PoC

utilisation: python3 CVE-2015-1635PoC.py ex. python3 CVE-2015-1635PoC.py http://www.xxx.com...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 Ce post concerne la CVE-2022–24992, ma première CVE, qui fait référence à une vulnérabilité dans le script générateur de QR-Code largement utilisé de QRCDR. plus d'infos Cordialement, n0lsec...

CVE-2024-6387-nmap

Script Nmap de vérification de vulnérabilité OpenSSH Description Le script openssh-vuln-checker.nse vérifie si un serveur exécute une version vulnérable d'OpenSSH CVE-2024-6387. Il se connecte au port SSH, récupère la bannière SSH et la compare à une liste de versions vulnérables connues. Version...