Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28481 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery

WordPress PhonePe Payment Solutions plugin through 1.0.15 is susceptible to server-side request forgery. An attacker can cause a website to execute website requests to an arbitrary domain, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized...

Apache Tika - XXE Injection

Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE via malicious XFA in PDFs, allowing file read and SSRF attacks. id: CVE-2025-54988 info: name: Apache Tika - XXE Injection author: tx1ee severity: critical description: | Apache Tika versions 1.13 through 3.2.1 are vulnerable to XXE vi...

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion

The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...

CVE-2025-55182-React2Shell

رياكت2شيل رياكت2شيل هو إثبات مفهوم PoC يستغل ثغرة حرجة لتنفيذ أوامر عن بُعد RCE في أطر الويب الحديثة التي تستخدم مكونات خادم رياكت RSC. يستهدف هذا الإثبات CVE-2025-55182 ، وهي ثغرة بتقييم CVSS 10.0 تسمح للمهاجمين عن بُعد غير المصادقين بتنفيذ أوامر نظام عشوائية عبر إلغاء تسلسل غير آمن داخل تنفيذ...

CVE-2021-41773

CVE-2021-41773 vulnérabilité du serveur HTTP Apache fonctionne uniquement avec la version 2.4.49 paramètres requis httpd.conf ... LoadModule cgimodule modules/modcgi.so décommenter cette ligne ... AllowOverride none Require all denied commenter cette ligne ou définir Require all granted...

CVE-2025-55182

CVE-2025-55182 — React2Shell: استغلال متقدم وبحث رسالة الماجستير -brightred إلغاء تسلسل البيانات غير الموثوقة + تلوث النموذج الأولي في مكونات خادم React تنفيذ تعليمات برمجية عن بُعد دون مصادقة عبر Server Actions في Next.js الإصدارات المتأثرة: React 19.0.0 - 19.2.0 · التصحيح: React 19.0.1 / 19.1.2...

[SECURITY] Fedora 44 Update: xorg-x11-server-Xwayland-24.1.14-1.fc44

Xwayland is an X server for running X clients under Wayland...

CLEANSTART-2026-IK18722 specially crafted request could have crashed the Apache HTTP Server prior to version 2

Security vulnerability affects the apache2 package. A specially crafted request could have crashed the Apache HTTP Server prior to version 2...

CLEANSTART-2026-QB44959 In Apache HTTP Server versions 2

Security vulnerability affects the apache2 package. In Apache HTTP Server versions 2...

CLEANSTART-2026-VO42453 In Apache HTTP Server 2

Security vulnerability affects the apache2 package. In Apache HTTP Server 2...

CLEANSTART-2026-TH04863 Apache HTTP server 2

Security vulnerability affects the apache2 package. Apache HTTP server 2...

CLEANSTART-2026-ZP32525 flaw was found in a change made to path normalization in Apache HTTP Server 2

Security vulnerability affects the apache2 package. A flaw was found in a change made to path normalization in Apache HTTP Server 2...

CLEANSTART-2026-RW21782 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Security vulnerability affects the apache2 package. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data...

CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...

SMBGhost

SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...

CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti

TREX-MES-Uygulamalarında-SQLi-Zafiyeti CVE-2026-18782 Обзор TREX MES — это коммерческая платформа системы управления производством MES / Индустрии 4.0, используемая для сбора и управления данными с производственного участка. Веб-API приложения выполняет параметр sql , поступающий от клиента,...

EUVD-2026-95428

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - تشغيل الأوامر بسهولة وأمان 🚀 نظرة عامة CVE-2025-55182 هي ثغرة أمنية في https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip ومكونات React Server. تسمح هذه المشكلة للمستخدمين غير المصرح لهم بتشغيل...

react2shell-CVE-2025-55182-poc

CVE-2025-55182 React2Shell PoC مع تجاوز WAF أداة استغلال لغة بايثون نظيفة وموثوقة كإثبات مفهوم لـ CVE-2025-55182 المعروفة باسم React2Shell، وهي ثغرة حرجة لتنفيذ الأوامر عن بُعد في مكونات خادم React المستخدمة في Next.js App Router والأطر المماثلة. تتضمن أداة الإثبات هذه حشوة ديناميكية لتجاوز جدران...