CVE-2026-81757

Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...

CVE-2026-75758

Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...

AZL-98220 CVE-2026-75758 affecting package elixir 1.16.1-2

Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.tostring/1, or List.tocharlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.ex classifies a list as a charlist using...

CVE-2026-37710

Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Catena completa n8n Lettura arbitraria di file non autenticata → Forgiatura token admin → Bypass sandbox → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critico Interessate| = 0.211.0 RCE Corretta| 1.121.0 AFR / 1.120.4+ RCE Divulgat...

WordPress-CVE-2026-63030-Analysis

🛡️ CVE-2026-63030: Analisi Tecnica e Audit Guida completa alla difesa, analisi delle minacce e verifica non distruttiva. Sommario • Matrice • Analisi Tecnica • Verifica • Correzione 📑 Sommario Esecutivo !IMPORTANT Solo a scopo difensivo: Questo repository fornisce esclusivamente ricerca accademica...

GHSA-JW39-3688-R4RX Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...

Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...

CVE-2026-9198

🚨 CVE-2026-9198 IBM Langflow OSS RCE non autenticata tramite bypass del login automatico 📋 Panoramica CVE-2026-9198 è una vulnerabilità critica di Remote Code Execution RCE non autenticata in IBM Langflow OSS. Questo exploit combina due vulnerabilità: CVE-2026-9103 : Bypass del login automatico c...

GHSA-FMGP-Q6JX-GG3X KubeVela Terraform remote loader DoS via unbounded file read

Summary KubeVela's Terraform remote configuration loader can be abused to make vela-core read an unbounded byte stream into memory, causing an out-of-memory kill and a control-plane denial of service. The issue is reachable when a user with permission to create or update a core.oam.dev/v1beta1...

KubeVela Terraform remote loader DoS via unbounded file read

Summary KubeVela's Terraform remote configuration loader can be abused to make vela-core read an unbounded byte stream into memory, causing an out-of-memory kill and a control-plane denial of service. The issue is reachable when a user with permission to create or update a core.oam.dev/v1beta1...

Copyfail-sh

copyfail-sh Nessuna race. Nessun offset. Nessun binario precompilato di cui fidarsi alla cieca. Un'implementazione in bash di CVE-2026-31431 Copy Fail. Lo script compila un helper C minimale inline in fase di esecuzione. Il livello bash gestisce il rilevamento dell'architettura, la decompressione...

code-shield

protocol-remediator MVP, das Schwachstellen-Findings in C/C++-Protokoll-/Plattform-Code in reproduzierbare Beweise normalisiert und Kandidaten-Patches in isolierten Kopien validiert. code-shield war ein Arbeitstitel, bei dem ein Namenskonfliktrisiko festgestellt wurde, daher werden für öffentlich...

React2Shell-Exploit-CVE-2025-55182

💀 React2Shell Exploit — CVE-2025-55182 root@kitploit: ██████╗ ███████╗ █████╗ ██████╗████████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔══██╗██╔════╝╚══██╔══╝╚════██╗██╔════╝██║ ██║██╔════╝██║ ██║ ██████╔╝█████╗ ███████║██║ ██║ █████╔╝███████╗███████║█████╗ ██║ ██║ ██╔══██╗██╔══╝...

CVE-2020-0023

CVE-2020-0022 ऐसा लगता है कि Android 9-6 में समान ब्लूटूथ सबसिस्टम है, Android 5 और 4 अलग हैं। Android 9.0 BlueFrag प्रयोग पैच: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf नीचे मैंने पैच की गई स्थिति को हिट किया। ठीक है, मुझे लगता है कि मुझे यह म...

IngressNightmare-RCE-POC

⚠️ Kritische RCE in Ingress-NGINX durch Konfigurationsinjektion CVE-2025-1974 und weitere Dieses Repository enthält einen Proof-of-Concept PoC Exploit für CVE-2025-1974 , eine kritische CVSS 9.8 Schwachstelle im Ingress-NGINX-Controller für Kubernetes. Dieser Fehler ermöglicht nicht...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow Nicht authentifizierte RCE per Auto-Login-Bypass PoC zu Bildungszwecken Dieses Repository bietet einen Proof of Concept zu Bildungszwecken für CVE-2026-9198 , das IBM Langflow OSS betrifft. Der PoC poc.py zeigt, wie ein nicht authentifizierter Angreifer Folgendes...

GHSA-2VH6-HW4J-32WW gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)

Summary gix-packetline panics when it receives a side-band packet line that contains only the band-id byte with an empty payload. A malicious Git server - or any remote a victim clones/fetches from - can abort the gix client process during a normal fetch. This is a pre-authentication,...

gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)

Summary gix-packetline panics when it receives a side-band packet line that contains only the band-id byte with an empty payload. A malicious Git server - or any remote a victim clones/fetches from - can abort the gix client process during a normal fetch. This is a pre-authentication,...

cve-2024-1708-connectwise_rce_reproduction

CVE-2024-1708 / CVE-2024-1709 – ConnectWise ScreenConnect: Authentifizierungsumgehung & Remote-Code-Ausführung CVSS-Score: 8.4 CVE-2024-1708 – 10.0 CVE-2024-1709 CWE: CWE-22 Pfad-Traversal, CWE-288 Authentifizierungsumgehung über einen alternativen Pfad Betroffene Software: ConnectWise...