4 matches found
Nginx-chain-Rift-Poolslip
nginx PoolSlip × Rift — ASLR-независимая RCE-цепочка Первая публичная цепочка из двух недавно раскрытых багов движка rewrite в nginx, объединённых в единый ASLR-независимый удалённыйsystem на штатном официальном образеnginx:1.30.0 Docker Debian 13, glibc 2.41 — без захардкоженных адресов, без...
CVE-2021-21551
Exploit CVE-2021-21551 for LPE by creating System cmd Tested on Windows 11 21H2 22000.1335...
CVE-2026-24105
The Tenda AC15V1.0 wireless router is vulnerable to a command injection flaw in the goform/formsetUsbUnload component. The root cause is the lack of validation for the v1 parameter, which is subsequently passed to the doSystemCmd function. An attacker could exploit this to execute arbitrary comma...
Z-BlogPHP 输入验证错误漏洞
Z-BlogPHP is an open source PHP-based blogging system for the Z-blog community. An information disclosure vulnerability exists in Z-BlogPHP, which stems from a configuration error in Open Redirect in Z-BlogPHP v1.5.2 and earlier versions. The vulnerability can be exploited to obtain sensitive...