CHIRP-CodeExecution_via_Malicious_ImageFile

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...

MAL-2026-17497 Malicious code in @babell/core (npm)

@babell/[email protected] impersonates @babel/core it copies the code and metadata of @babel/core and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

MAL-2026-17499 Malicious code in @nagular/core (npm)

@nagular/[email protected] impersonates @angular/core by name only; its code is an unrelated library described as "Core Libs" and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

Malicious code in @nagular/core (npm)

@nagular/[email protected] impersonates @angular/core by name only; its code is an unrelated library described as "Core Libs" and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

Malicious code in @angularr/cli (npm)

@angularr/[email protected] impersonates @angular/cli it copies the code and metadata of @angular/cli, including the ng binary and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

MAL-2026-17492 Malicious code in @angularr/cli (npm)

@angularr/[email protected] impersonates @angular/cli it copies the code and metadata of @angular/cli, including the ng binary and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

cve-2025-2082-POV

CVE-2025-2082 – Sobrescritura de Puntero de Función PoV estilo VCSEC Este repositorio demuestra una Prueba de Vulnerabilidad PoV que simula una falla crítica de corrupción de memoria inspirada en CVE-2025-2082, descubierta en el componente VCSEC Seguridad del Controlador del Vehículo de Tesla. La...

Malicious code in express-enhanced (npm)

[email protected] impersonates express it copies express's package metadata, including the description "Fast, unopinionated, minimalist web framework" and author TJ Holowaychuk and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

MAL-2026-17489 Malicious code in express-enhanced (npm)

[email protected] impersonates express it copies express's package metadata, including the description "Fast, unopinionated, minimalist web framework" and author TJ Holowaychuk and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

cve-2021-25646

Apache Druid 远程代码执行 漏洞概要 Apache Druid 官方发布安全更新，通报了一个远程代码执行漏洞，漏洞编号 CVE-2021-25646。由于 Apache Druid 默认情况下缺乏授权认证，攻击者可以发 送特制请求，利用 Druid 服务器上进程的特权执行任意代码。 Apache Druid 是用 Java 编写的面向列的开源分布式数据存储，旨在快速获 取大量事件数据，并在数据之上提供低延迟查询。Druid 旨在快速提取大量事件 数据，并在数据之上提供低延迟查询。Druid 通常用于商业智能/ OLAP 应用程序 中，以分析大量的实时和历史数据。 脚本使用...

CVE-2020-12124

IoTエクスプロイトの構造：ハンズオンからRCEまで 原文はこちら：https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce 執筆者：David E. Baker、公開日：2023年6月1日 はじめに この調査は、2020年6月時点のWavlink Wireless-AC1200...

cve-2023-22527

Ejecución de Código Arbitrario en la Memoria de Confluence CVE-2023-22527 es una vulnerabilidad ampliamente conocida que afecta a Atlassian Confluence. La mayoría de los exploits para esta vulnerabilidad utilizan freemarker.template.utility.Execute para ejecutar un comando del sistema operativo,...

CVE-2026-103628

An out of bounds write flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/549995090...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OSコマンドインジェクション PoC English version 概要 このリポジトリは、File Browser （バージョン 2.0.0 から 2.33.1）で発見された重大なOSコマンドインジェクション脆弱性 CVE-2026-35585 のProof of Concept（PoC）です。 この脆弱性は「Custom Command Hooks」機能に存在します。シェル実行時に $FILE や $USERNAME...

CVE-2016-2098

CVE-2016-2098 Ruby on Rails 3.2.22.2未満、4.x系4.1.14.2未満、4.2.x系4.2.5.2未満のAction Packでは、アプリケーションによるrenderメソッドの無制限な使用を悪用することで、リモート攻撃者が任意のRubyコードを実行できる脆弱性があります。 リソース https://vulners.com/cve/CVE-2016-2098 使用方法 このエクスプロイトスクリプトを使用するには、3つのパラメータが必要です。 1. 脆弱なWebサーバーのWebページURL 2. コマンド注入の可能性がある脆弱なパラメータ 3...

CVE-2020-7961-payloads

CVE-2020-7961-payloads 在 Liferay Portal 7.2.1 CE GA2 之前版本中，对不可信数据的反序列化允许远程攻击者通过 JSON Web 服务 JSONWS 执行任意代码。 步骤1 在 LifExp.java 中编写你的 payload 步骤2 使用 javac 编译 步骤3 设置你的日志服务器（也许你想用 "Burp Collaborator Client"） 步骤4 运行 poc.py ....享受吧 ; 😇 poc 代码由 mzer0one 编写 🙏 https://github.com/mzer0one/CVE-2020-7961-POC...

Adobe ColdFusion - Deserialization of Untrusted Data

Adobe ColdFusion versions 2018u17 and earlier, 2021u7 and earlier and 2023u1 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-38203 info: name:...

CVE-2022-24818

CVE-2022-24818：GeoServer 与 GeoTools 中通过未经检查的 JNDI 查找实现 Java 反序列化 GeoTools 库包含多个数据源，这些数据源可以执行未经检查的 JNDI 查找，进而可被利用来进行类反序列化，并导致任意代码执行。 例如，这种情况可能发生在 GeoServer 中，但需要管理员级登录才能触发。 厂商披露： 该漏洞的厂商披露与修复方案可在此处找到。 概念验证： 更多详情及利用过程可参阅此 PDF。 其他资源： ysoserial...

CVE-2026-105080

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloadedrecipe file...

CVE-2026-105080

In ConvertX versions prior to 0.19.0 , the converters/calibre.ts component fails to block recipe files . Instead, it passes these files to the ebook-convert program from Calibre. This vulnerability allows for the execution of arbitrary code contained within .recipe or .downloaded_recipe files. Re...