627085 matches found
CVE-2003-0264
CVE-2003-0264 Exploit for buffer overflow in SLmail 5.5 CVE-2003-0264 Based on: https://github.com/Gallopsled/pwntools https://github.com/rapid7/metasploit-framework Example output: $ ./slmail-into-shell.py + Opening connection to 192.168.15.100 on port 110: Done + Trying to bind to 0.0.0.0 on po...
Code-Roulette
Ruleta de Código Interfaz de terminal, multijugador en línea, Ruleta Rusa donde el perdedor ejecuta el archivo payload Python del ganador. Ruleta de Código Descripción general Cómo funciona el juego Video de demostración Uso Como paquete Con el gestor de paquetes UV Con Pip Archivos Payload...
CVE-2013-3664_MAC
Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUp no valida la entrada al analizar una textura MACPict incrustada. Se demuestra que es posible la ejecución de código arbitrario después de que una textura, miniatura o imagen de fondo maliciosa provoque un desbordamiento ...
Centreon-20.04
CVE-2020-12688 - RCE Autenticado Centreon 20.04 Variable de nombre de comando en minHelpCommand.php RCE CVE-2020-12688 Documentación de la última versión de Centreon: https://docs.centreon.com/current/en/releases/centreon-core.html Descubierto por: TheCyberGeek Fecha de descubrimiento: 30/04/2020...
EUVD-2026-92868
Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code in server/src/repositories/media.repository.ts passed to libvips. Files that bypassed libvips' native SVG loader fell...
CVE-2023-30547
CVE-2023-30547 vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node en la lista blanca. Existe una vulnerabilidad en la sanitización de excepciones de vm2 para versiones hasta la 3.9.16, que permite a los atacantes lanzar una excepción de host no sanitizada...
CVE-2024-36401-GeoServer-RCE
Vulnerabilidad RCE en GeoServer CVE-2024-36401 - script de detección CVE-2024-36401 es una vulnerabilidad de seguridad crítica que afecta a GeoServer, un servidor de código abierto para compartir datos geoespaciales, y a GeoTools, una biblioteca Java de código abierto que proporciona herramientas...
CVE-2019-12735
CVE-2019-12735 Es una vulnerabilidad de tipo Arbitrary Code Execution a través de modeline en vim/neovim Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec Vim en versiones anteriores a 8.1.1365 y Neovim en versiones...
CVE-2022-38601
Suggested description Lotsia Soft Lotsia PDM PLUS v5.80.220414 was discovered to contain a buffer overflow. Vulnerability Type Buffer Overflow Vendor of Product Lotsia Soft Affected Product Code Base Lotsia PDM PLUS - 5.80.220414 Attack Type Local Impact Code execution true Impact Denial of Servi...
fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...
EUVD-2026-91720
fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution...
GHSA-27VJ-QCQG-25RC fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...
CVE-2021-26700
CVE-2021-26700 Nota: este manual es válido únicamente para los miembros del laboratorio DSNS. Introducción Esta es una vulnerabilidad de ejecución remota de código RCE que residía en una extensión de Visual Studio Code VS Code llamada npm, desarrollada por Microsoft y cuyo objetivo era permitir...
CVE-2022-22947
CVE-2022-22947 A code injection attack on spring cloud gateway Summary of the CVE In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+, applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make ...
GHSA-5GMW-XHRV-C9V3 Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
tinypool passes worker options to new Worker by reading them off a plain object whose prototype is Object.prototype. Options the application did not set are resolved through the prototype chain and then passed explicitly to workerthreads.Worker. Node core ignores Worker options inherited from...
Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
tinypool passes worker options to new Worker by reading them off a plain object whose prototype is Object.prototype. Options the application did not set are resolved through the prototype chain and then passed explicitly to workerthreads.Worker. Node core ignores Worker options inherited from...
EUVD-2026-91718
Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution...
NPM: Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
NPM: Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution vulnerability discovered by ? in WordPress Npm tinypool versions = 2.1.0...