594047 matches found
AZL-105923 CVE-2026-94422 affecting package xdg-dbus-proxy 0.1.6-2
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-104026
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...
CVE-2026-104026
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...
EUVD-2026-91648
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could trigger code execution on otherwise read-only actions such as sl log/blame/annotate...
CVE-2026-104026
In Sapling SCM versions prior to v0.2.20260929-102736 , the software allows control characters to be embedded in Git subtree URLs . An attacker can exploit this by providing a maliciously constructed repository; if a target clones this repository, it can trigger code execution during otherwise re...
pcre2: pcre2: Out-of-bounds write via crafted regular expression
A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...
CVE-2026-94422 xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
EUVD-2026-91646
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...
CVE-2026-94422
The xdg-dbus-proxy filtering proxy (versions before 0.1.9 ) contains an incorrect implementation of message filtering. An attacker can bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. This vulnerability could allow a malicious ...
CVE-2026-35194
CVE-2026-35194 β ΠΠ½Π΅Π΄ΡΠ΅Π½ΠΈΠ΅ SQL-ΠΊΠΎΠ΄Π° Π² Apache Flink Π£Π΄Π°Π»ΡΠ½Π½ΠΎΠ΅ Π²ΡΠΏΠΎΠ»Π½Π΅Π½ΠΈΠ΅ ΠΊΠΎΠ΄Π° Π½Π° TaskManager'Π°Ρ Apache Flink ΡΠ΅ΡΠ΅Π· ΠΈΠ½ΡΠ΅ΠΊΡΠΈΡ ΠΏΡΠΈ Π³Π΅Π½Π΅ΡΠ°ΡΠΈΠΈ SQL-ΠΊΠΎΠ΄Π°. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 β Code Injection ΠΠ°ΡΡΠΎΠ½ΡΡΠΎ| Flink 1.15.0 β 1.20.3 / 2.0.0 β 2.2.0 ΠΡΠΏΡΠ°Π²Π»Π΅Π½ΠΎ| 1.20.4 / 2.0.2 ...
Exploit for Command Injection in Php
Task 04 β Exploitation with Metasploit Zyroo Cybersecurity...
CVE-2026-35031
CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...
CVE-2026-34197-Apache-ActiveMQ-RCE
Fixed the issue where the reverse shell failed because the command was not XML-escaped...
CVE-2025-69985
FUXA β€ 1.2.8 Auth Bypass + RCE CVE-2025-69985 π Description This Python exploit targets CVE-2025-69985, a critical authentication bypass vulnerability in FUXA web-based SCADA/HMI software versions β€ 1.2.8. By sending a crafted JSON payload with embedded Node.js code to the unprotected...
CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC
CVE-2025-47812 β Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server whoami root References CVE-2025-47812 W...
Exploiting-a-vulnerability-using-reverse-shell
Information Security Fundamentals β Spring 2026 Project Total Points: 20 | Deadline: No late submissions accepted Overview This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability CVE-2025-32433 in...
CVE-2018-15961
CVE-2018-15961 - Adobe ColdFusion 2018 RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2018. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If...
CVE-2025-13486
Mass Exploit CVE-2025-13486 Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepareform β οΈ Vulnerability Details The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via th...