CVE-2026-73276

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-84268

CVE-2026-84268 is a heap-based buffer overflow in the gvfs SFTP backend (gvfsd-sftp process). When mounting a share and reading a file, the read_reply() function fails to validate the server-provided length against the allocated buffer size, allowing a malicious SFTP server to write past intended...

CVE-2026-84268 Gvfs: sftp: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

EUVD-2026-69287

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-84268

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

EUVD-2026-69233

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

EUVD-2026-69230

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-58569

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges , resulting in high impact to confidentiality, integrity, and availability with a cha...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Только авторизованное тестирование. Этот репозиторий предназначен для контролируемых лабораторных сред, CTF-платформ, таких как Hack The Box, внутренней валидации и защитной проверки. Не запускайте этот инструмент против систем, которыми вы не владеете и...

CVE-2025-8110

Произвольная запись файлов в RCE в Gogs CVE-2025-8110 - Эксплойт для образовательных целей Этот репозиторий содержит скрипт доказательства концепции PoC на Python для демонстрации и анализа уязвимости, зарегистрированной как CVE-2025-8110 в самоуправляемом Git-сервисе Gogs версии 0.13.3 и ниже. ⚠️...

CVE-2026-5029-Exploit

🔥 CVE-2026-5029 — Code Runner MCP 서버 RCE run-code MCP 도구를 통한 인증 없는 원격 코드 실행 CVE-2026-5029에 대한 개념 증명PoC 익스플로잇 — 서버가--transport http로 실행될 때 MCP 도구를 통해 트리거되는 Code Runner MCP Server의 치명적인 인증 없는 원격 코드 실행RCE 취약점입니다...

CVE-2018-1000533

Уязвимость удаленного выполнения кода GitList 0.6.0 CVE-2018-1000533 GitList — современный просмотрщик Git-репозиториев. В GitList версии 0.6.0 и ниже существует уязвимость, связанная с передачей неправильно проверенных входных данных в системные функции, что позволяет выполнять произвольные...

EXPLOIT-CVE-2026-26216

CVE-2026-26216 — RCE без аутентификации в Crawl4AI через hooks GHSA-5882-5rx9-xgxp CVSS 10.0 · RCE до аутентификации · CWE-94 Code Injection Неаутентифицированное удалённое выполнение кода на Docker-сервере Crawl4AI . Этот код выполняется с помощью exec внутри «самодельной песочницы» — словаря...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder Joomla 인증되지 않은 원격 코드 실행 RCE CVE-2026-48908 에 대한 개념 증명 익스플로잇, 이는 JoomShaper의 Joomla용 SP Page Builder 컴포넌트 comsppagebuilder에서 발생하는 심각한 CVSS 4.0 = 10.0 인증되지 않은 원격 코드 실행 취약점입니다...

CVE-2026-63030-CVE-2026-60137

CVE-2026-63030 & CVE-2026-60137 — wp2shell RCE без аутентификации в ядре WordPress — Route Confusion + SQL Injection, объединенные в удаленное выполнение кода...

CVE-2026-60004

CVE-2026-60004 — Gitea diffpatch RCE PoC удаленного выполнения кода через конечную точку diffpatch Gitea. Учетная запись с правом записи в репозиторий на инстансах с открытой регистрацией достаточно анонимной регистрации может выполнять произвольные команды shell на сервере от имени сервисной...