CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

MAGNOLIA-8348

MAGNOLIA-8348: FreeMarker Restriction Bypass 3 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.17 and below allows attackers to bypass security restrictions and execute arbitrary code, read/write/move/copy/delete arbitrary files or launch DoS attacks via a crafted FreeMarke...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93029

A stored XSS vulnerability exists in the WHM Manage SSL Hosts interface , which can allow for arbitrary code execution . The vulnerability is associated with CWE-79 (Improper Neutralization of Input During Web Page Generation). Based on the CVSS v3.0 metric, the flaw has a CRITICAL severity score...

EUVD-2026-91200

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93697

A stored XSS vulnerability exists in the WHM Mass Modify Accounts interface, potentially allowing for arbitrary code execution . The vulnerability is characterized by a CRITICAL base severity score of 9.0, where an attacker with low privileges can achieve high impact on confidentiality, integrity...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

EUVD-2026-91199

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 en Magnolia CMS Un problema en el FreeMarker Filter de Magnolia CMS v6.2.16 y anteriores permite a los atacantes eludir las restricciones de seguridad y leer/escribir/mover/copiar/eliminar archivos arbitrarios mediante un payload de FreeMarker...

jvmtiAgentLoad-Exploit

Ejecución de código arbitrario mediante jvmtiAgentLoad Descripción: Herramientas y código para generar un JAR malicioso para explotar jvmtiAgentLoad Uso: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Objetivo Linux El siguiente comando genera un JAR mal.jar que...

DS-Wireless-Communication-Remote-Code-Execution

Ejecución remota de código en la comunicación inalámbrica de DS Inyecta código arbitrario en el juego de un cliente. Requisitos previos Python 3.10 pip pydivert Uso pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py ID de CVE CVE-2023-45887 Licencia GNU General...

CVE-2025-32463-POC

CVE-2025-32463 - sudo 本地权限提升 PoC ⚠️ 此仓库包含针对CVE-2025-32463的概念验证（PoC）利用代码 仅用于教育目的 和授权环境 中使用。 🧠 关于漏洞 CVE-2025-32463 是一个影响 sudo 版本 1.9.14 至 1.9.17 的本地权限提升漏洞。 漏洞存在于 sudo 处理 1.9.14 引入的 --chroot（-R）选项的方式中。它允许非特权用户在受控的 chroot 路径中构造伪造的 nsswitch.conf，迫使以 root 身份运行的 sudo 加载任意的 NSS 库 并以 root 权限执行代码。 ✅ 受影响版本...

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

GitLab CE/EE - Remote Code Execution

GitLab CE/EE 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 is susceptible to remote code execution. An authenticated user authorized to import projects can import a maliciously crafted project, thus possibly being able to execute malware, obtain sensitive information, modi...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...

WBCE-CMS-Stored-XSS---Pages-Menu

WBCE CMS Stored XSS v1.6.1 Autor: Sergio Descripción: WBCE CMS 1.6.1 está afectado por una vulnerabilidad de Cross-Site Scripting almacenado XSS que permite a los atacantes ejecutar código arbitrario a través de un payload creado en el parámetro Intro Page del menú Pages. El payload se ejecutará ...

[SECURITY] [DLA 4812-1] libio-compress-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 02, 2026 https://wiki.debian.org/LTS -...