2563 matches found
CVE-2026-49049
CVE-2026-49049 — Helix3 JoomShaper Joomla Scanner RCE AJAX non authentifié Scanner / vérificateur de masse pour CVE-2026-49049 : gestionnaire AJAX non authentifié dans le plugin Helix3 Framework pour Joomla v1.0 – 3.1.0 , corrigé dans 3.1.1+. Tests autorisés uniquement. Utilisez uniquement sur de...
CVE-2018-17553
CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 et antérieure Cette preuve de concept a été réalisée lors du travail sur la boîte Black Pearl de TCM. Je n'ai trouvé personne qui ait publié un PoC autre que l'utilisation de Metasploit. Comme j'évite Metasploit dans mon parcours de hacki...
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Генератор детектирующих артефактов для Citrix NetScaler CVE-2026-8452 Технические подробности см. в нашем посте в блоге. Детектирование в действии python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ ...
Project-Exploiting-CVE-2024-27198-RCE-Vulnerability
Exploitation de la vulnérabilité CVE-2024-27198-RCE Dans ce projet, j'ai exploité la vulnérabilité CVE-2024-27198-RCE pour mener une attaque d'exécution de code à distance RCE sur un serveur TeamCity vulnérable. Cette vulnérabilité permet de téléverser et d'activer un plugin malveillant qui donne...
Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandlerhandlePostRequest is able to create JmxRequest...
CVE-2026-54612
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobalElements in admin/controller/editor/global-trait.php concatenates the attacker-controlled file portion of data-v-save-global to the active theme directory...
EUVD-2026-82570
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobalElements in admin/controller/editor/global-trait.php concatenates the attacker-controlled file portion of data-v-save-global to the active theme directory...
CVE-2026-54612: Improper Limitation of a Pathname to a Restricted Directory
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobalElements in admin/controller/editor/global-trait.php concatenates the attacker-controlled file portion of data-v-save-global to the active theme directory...
CVE-2026-89040
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
CVE-2026-89040
Tencent Mass Service Engine in Cluster (MSEC) is affected by a path traversal vulnerability that allows a remote, unauthenticated attacker to send a crafted POST request containing ../, gaining root access on the target device. An attacker who uploads a webshell can then execute arbitrary code as...
CVE-2026-89040 Tencent Mass Service Engine in Cluster (MSEC) path traversal
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
EUVD-2026-79672
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
PT-2026-93111
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
CVE-2026-89040: Improper Limitation of a Pathname to a Restricted Directory
Tencent Mass Service Engine in Cluster MSEC allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device. An attacker who uploads a webshell can execute arbitrary code as root...
Exploit for Unsafe Reflection in Progress Telerik_Ui_For_Asp.Net_Ajax
Telerik RadAsyncUpload RCE Exploit CVE-2026-13181 through 1...
Exploit for Deserialization of Untrusted Data in Jetbrains Teamcity
CVE-2026-63077 — JetBrains TeamCity Unauthenticated RCE !Py...
CVE-2026-61639
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...
CVE-2026-61639 Wallos: Zip Slip path traversal in database restore writes files to webroot
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...
CVE-2026-61639 Wallos: Zip Slip path traversal in database restore writes files to webroot
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...
CVE-2026-61639 Wallos: Zip Slip path traversal in database restore writes files to webroot
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, POST /endpoints/db/restore.php calls ZipArchive::extractTo without validating entry names for ../ sequences. Admin uploads crafted zip with entry logos/../../endpoints/shell.php to write webshell to...