CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

EUVD-2026-91200

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93029

A stored XSS vulnerability exists in the WHM Manage SSL Hosts interface , which can allow for arbitrary code execution . The vulnerability is associated with CWE-79 (Improper Neutralization of Input During Web Page Generation). Based on the CVSS v3.0 metric, the flaw has a CRITICAL severity score...

CVE-2026-93029

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

EUVD-2026-91199

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

CVE-2026-93697

A stored XSS vulnerability exists in the WHM Mass Modify Accounts interface, potentially allowing for arbitrary code execution . The vulnerability is characterized by a CRITICAL base severity score of 9.0, where an attacker with low privileges can achieve high impact on confidentiality, integrity...

CVE-2026-93697

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

MAGNOLIA-8281

MAGNOLIA-8281: Обход ограничений FreeMarker 2 в Magnolia CMS Проблема в фильтре FreeMarker в Magnolia CMS v6.2.16 и ниже позволяет злоумышленникам обходить ограничения безопасности и читать/записывать/перемещать/копировать/удалять произвольные файлы с помощью специально созданной полезной нагрузк...

jvmtiAgentLoad-Exploit

Выполнение произвольного кода через jvmtiAgentLoad Описание: Инструменты и код для генерации вредоносного JAR-файла для эксплуатации jvmtiAgentLoad Использование: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Целевая система Linux Следующая команда создаёт...

CVE-2025-32463-POC

CVE-2025-32463 - локальное повышение привилегий в sudo PoC ⚠️ Этот репозиторий содержит эксплойт Proof of Concept PoC для CVE-2025-32463 Предназначен только для образовательных целей и использования в авторизованных средах. 🧠 О уязвимости CVE-2025-32463 — это локальная уязвимость повышения...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...

WBCE-CMS-Stored-XSS---Pages-Menu

WBCE CMS Хранимый XSS v1.6.1 Автор: Sergio Описание: WBCE CMS 1.6.1 подвержен уязвимости хранимого межсайтового скриптинга XSS, которая позволяет злоумышленникам выполнять произвольный код с помощью полезной нагрузки, созданной в параметре Intro Page в меню Pages. Полезная нагрузка будет...

[SECURITY] [DLA 4812-1] libio-compress-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 02, 2026 https://wiki.debian.org/LTS -...

CVE-2026-103484

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Exécutez des commandes facilement et en toute sécurité 🚀 Aperçu CVE-2025-55182 est une vulnérabilité dans https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip et les composants serveur React. Ce...

CVE-2025-5548

💣 Разработка эксплойта — переполнение буфера Этот репозиторий документирует полный процесс эксплуатации уязвимости типа переполнение буфера , следуя структурированной методологии от начального анализа до контроля потока выполнения. 🎯 Цель Цель этого этапа — разработать функциональный эксплойт,...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

ROS-20261002-73-0031

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...