CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...

CVE-2024-42850

CVE-2024-42850 An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements. Writeup When changing your password, upon submission of the new password, the password is first sent in a POST request to an endpoint which checks t...

cve-2026-32475-elementor-pro-lab

CVE-2026-32475 — Elementor Pro Forms: неаутентифицированная произвольная загрузка файлов → RCE A/B Docker-лаборатория, воспроизводящая CVE-2026-32475 CVSS 9.x, Patchstack; поле File Upload в формах Elementor Pro, затронуты версии ≤ 4.2.1, исправлено в 4.2.2 от 2026-08-19; сообщил Tin Pham / TF1T...

CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

CVE-2026-71890

In Bouncy Castle for Java before 1.86, validation of an MLS RFC 9420 external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted the proposals by type and bounded the removed leaf index but never established that the removed leaf had anything to d...

CVE-2026-34835-Black-box-Analysis

Этот репозиторий предоставляет анализ безопасности методом чёрного ящика уязвимости CVE-2026-34835 с точки зрения внешнего пентестера. Цель состоит не в обратной разработке уязвимости, а в документировании того, как специалист по безопасности может выявить, подтвердить и оценить её влияние в ходе...

SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id

The SureForms plugin for WordPress is vulnerable to payment amount validation bypass in versions up to, and including, 2.5.2. The createpaymentintent AJAX handler checks if $formid 0 && !empty$blockid before calling validatepaymentamount. By sending formid=0 the default intval of a missing/zero...

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

9router <=0.5.4 - Authentication Bypass

9Router prior to 0.5.6 contains an authentication bypass caused by trusting client-supplied X-9r-Real-Ip header in src/dashboardGuard.js, letting remote unauthenticated attackers access local API routes and consume resources, exploit requires bypassing API-key validation via header manipulation...

CVE-2018-1263-Demo

Démonstration d'exploit Ce guide vous aidera à installer le composant vulnérable et à réaliser l'attaque liée au bug de phpMyAdmin mentionné dans CVE-2018-1263. Description de la CVE Pourquoi la vulnérabilité existe-t-elle Comment fonctionne l'attaque Comment installer le composant vulnérable...

recollapse

REcollapse REcollapse est un outil auxiliaire pour le fuzzing de regex en boîte noire afin de contourner les validations et découvrir les normalisations dans les applications web. Il peut également être utile pour contourner les WAF et les atténuations de vulnérabilités faibles. Pour plus...

CVE-2026-103001

PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT.mergeoptions method can modify a caller-supplied mutable options mapping when verifysignature is false. If an application reuses that same mapping for a later decode or decodecomplete call and...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Оригинальная ссылка: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE через обход проверки на стороне клиента Краткое описание В ходе тестирования безопасности экземпляра MotionEye, работающего в...

CVE-2026-29786

CVE-2026-29786 Исследование: Joshua van Rijswijk Описание Этот репозиторий содержит Proof of Concept PoC для CVE-2026-29786 — уязвимости в npm-пакете tar, которая позволяет специально созданному архиву создать жёсткую ссылку, указывающую за пределы целевой директории извлечения. Проблема возникае...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.56 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2026-33693

CVE-2026-33693 : SSRF via contournement 0.0.0.0 dans activitypub-federation-rust v4isinvalid CVSS 6.5 Modéré Mots-clés : SSRF, 0.0.0.0, contournement de validation IP, activitypub-federation, Lemmy, Rust, ActivityPub Table des matières Aperçu Détails de la vulnérabilité Analyse technique Chaîne...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versions " image.jpg 4 Renommez ce fichier en image.php. 5 Sur la page du formulaire, téléchargez le fichier image.php créé. 6 Maintenant, pour exécuter ce fichier, accédez simplement à https://yoursite.com/assets/image.php Remarque : remplacezhttps://yoursite.com pa...

CVE-2025-30144

Краткое описание Библиотека fast-jwt некорректно проверяет утверждение iss в соответствии с RFC https://datatracker.ietf.org/doc/html/rfc7519page-9. Подробности Проверка утверждения iss эмитент в библиотеке fast-jwt допускает массив строк как допустимое значение iss. Этот недостаток проектировани...

RLSA-2026:73428 Important: nodejs24 security, bug fix, and enhancement update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

nodejs24 security, bug fix, and enhancement update

An update is available for nodejs24. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a platform built on Chrome's JavaScript runtime for easily...