RLSA-2026:67283 Moderate: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:67308 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

RLSA-2026:67315 Moderate: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

CVE-2021-40444

完全武器化的CVE-2021-40444 用于利用CVE-2021-40444（Microsoft Office Word远程代码执行）的恶意docx生成器，可与任意DLL文件配合使用。 背景 尽管互联网上已经有许多PoC，我决定自己尝试武器化这个漏洞，因为我能找到的现有资料缺乏值得分享的有价值信息，同时考虑到微软已经发布了该漏洞的补丁。 到目前为止，我看到的用于创建功能完整的生成器的唯一有价值资源是： Ret2Pwn的博客 j00sean的推文 上述资源概述了创建完整攻击链所需的许多要求。为避免重复太多不必要的信息，我只总结相关细节。 攻击链 1. 打开Docx文件 2...

PoC_CVE-2017-3164_CVE-2017-1262

Apache Solr Poc CVE-2017-3164 CVE-2017-12629 Esta carpeta contiene ejemplos de exploits para Apache Solr CVE-2017-3164 CVE-2017-12629. Para ser utilizados únicamente con fines educativos y con el permiso total del propietario del servidor Apache Solr. Necesitarás conocer la IP o el nombre DNS del...

CVE-2024-5274-Detection

CVE-2024-5274-Detection 守护代码：一个用于发现CVE-2024-5274漏洞的脚本 CVE-2024-5274 Google Chrome 零日漏洞检测与更新脚本 概述 Google 最近修补了 Chrome 中的第四个零日漏洞，即 CVE-2024-5274，该漏洞允许攻击者执行恶意代码。此漏洞影响 Windows、macOS 和 Linux 上的 Chrome 用户。该漏洞已被积极利用，因此用户立即更新浏览器至关重要。 本仓库提供了一个简单的 Python 脚本，用于帮助检测并确保 Google Chrome 已更新，以缓解 CVE-2024-5274。 漏洞...

CVE-2026-54177 backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...

CVE-2026-54177

backpack/crud (a Laravel Backpack package for building admin panels) is vulnerable to arbitrary file upload in versions 6.0.0 through 6.8.14 and 7.0.38 . The HasUploadFields trait and FileNameGenerator preserve the client-supplied file extension without rejecting server-executable types. An authe...

CVE-2026-54177 backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, HasUploadFields methods uploadFileToDisk and uploadMultipleFilesToDisk, used through CrudTrait...

CVE-2024-23897

CVE-2024-23897：Jenkins 任意文件读取漏洞导致远程代码执行（RCE） 简介 本仓库包含一个 Python 脚本，用于利用 Jenkins 中的严重漏洞（CVE-2024-23897），该漏洞可导致任意文件读取和远程代码执行（RCE）。此漏洞允许未经认证的攻击者在目标 Jenkins 服务器上执行任意命令，可能危及整个系统。 先决条件 在使用此利用工具之前，请确保已安装以下先决条件： Python 3 或更高版本 requests 库 argparse 库 colorama 库 concurrent.futures 库 你可以使用以下命令安装这些依赖：...

CVE-2024-8856

CVE-2024-8856：WordPress WP Time Capsule 插件任意文件上传漏洞 概述 CVE-2024-8856 是 WP Time Capsule WordPress 插件中存在的一个安全漏洞，允许未认证用户在服务器上上传任意文件。如果上传的文件被服务器执行，这可能导致远程代码执行。该漏洞源于不充分的文件验证，攻击者可通过向易受攻击的端点发送特制请求来利用此漏洞。 受影响版本 1.22.21 之前的 WP Time Capsule 插件版本（已在 1.22.22 中修复）。 影响 该漏洞允许未认证用户： 在服务器上上传恶意 PHP 脚本。...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 根据美国国家漏洞数据库（NVD）CVE-2021-41773，Apache HTTP Server 2.4.49 容易受到路径遍历和远程代码执行攻击。 路径遍历 路径遍历漏洞是由于为路径规范化（即从URL路径中移除不需要或危险的部分）而添加的新代码更改引入的，但它在检测编码路径遍历字符“点点斜杠（../）”的不同技术方面存在不足。...

CVE-2025-1307

Exploit de Newscrunch CVE-2025-1307 🚨 Resumen Este exploit se dirige a una vulnerabilidad crítica CVE-2025-1307 en el tema Newscrunch de WordPress. La falla permite a usuarios autenticados Suscriptor y superiores subir archivos arbitrarios debido a la falta de comprobaciones de capacidad en la...

CVE-2021-3129

CVE-2021-3129 Laravel = V8.4.2 调试模式远程代码执行 RCE 批量扫描工具 | Python 参考 Ambionics.io PHPGCC PHPGCC 链 Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2 Monolog/RCE3 Monolog/RCE4 环境变量 为了运行此项目，你需要确保一些变量。 请求时验证 SSL : confVerify = True or Fal...

CVE-2026-90945 Crawlab through 0.6.3 Authentication Bypass via Hard-coded JWT Secret

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...

CVE-2026-90945

Crawlab versions through 0.6.3 contain a critical authentication bypass caused by a hard-coded HMAC-SHA256 secret used for JWT token signing. Because the secret cannot be overridden via configuration or environment variables, an unauthenticated network attacker can forge valid administrator token...

EUVD-2026-77712

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...

CVE-2026-8037-POC

CVE-2026-8037-POC 包括能执行的命令探测和一键getshell（需要服务器部署服务） pco.yaml 配合nuclei可以快速探测 快速开始 交互模式 root@kitploit: python go.py 输入目标 URL → 选功能菜单即可。 探测目标 root@kitploit: 快速探测（8 项基本信息） python go.py -t https://IP:PORT --probe fast 深度探测（全部命令：30+ 项） python go.py -t https://IP:PORT --probe deep 批量探测 python go.py -f...