MAL-2026-16329 Malicious code in chai-as-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397fee7b80d73ee4c82892a746b2bab33a4cd2f71ef1ec4fe6fbbaa0bb270308 On require of the package, index.js loads lib/initializeCaller.js, which runs an IIFE at module load. The IIFE decodes a base64-concealed URL resolvi...

CVE-2019-9978

CVE-2019-9978 – 概念実証 PoC CVE-2019-9978 の脆弱性に対する機能する PoC です。この脆弱性は WordPress プラグイン Social Warfare = 3.5.2 に影響し、リモートコード実行 RCE を可能にします。 📌 説明 このエクスプロイトは swpdebug=loadoptions パラメータを悪用してリモートペイロードの読み込みを強制し、対象サーバーでのコマンド実行と リバースシェル の取得を可能にします。 ⚠️ 教育目的および許可された環境でのみ使用してください 。 🧰 要件 Python 3 脆弱な...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libtiff: libtiff: Arbitrary code execution via process_command_opts() function

A flaw was found in libtiff. An attacker can exploit a vulnerability in the processcommandopts function within tools/tiffcrop.c to execute arbitrary code. This could lead to a complete compromise of the affected system...

CVE-2023-42426

CVE 编号： CVE-2023-42426 漏洞类型： 跨站脚本 描述： Froala Froala Editor v.4.1.1 中的跨站脚本（XSS）漏洞允许远程攻击者通过“插入图像”组件中的“插入链接”参数执行任意代码。 复现步骤： 1. 选择“插入图像”选项并添加一张新图像。 2. 点击已添加的图像，然后使用“插入链接”选项并输入载荷： https://example.com" onmouseover='alertxss'。 参考： 1. https://cve.report/CVE-2023-42426 2...

Solar-exploiting-log-4j

🔥 Solar Exploiting Log4j - TryHackMe ウォークスルー 📌 ルーム: Solar Exploiting Log4j プラットフォーム: TryHackMe 難易度: 中級 トピック: Log4Shell Log4j 脆弱性 🧠 目的 Log4j の脆弱性 CVE-2021-44228 を悪用してリモートコード実行を達成し、フラグを取得します。 🛠️ 使用ツール Nmap Burp Suite cURL Netcat Python HTTP Server 🌐 ステップ 1: 偵察 🔍 対象スキャン root@kitploit: nmap -sC -sV 📌...

CVE-2026-53921

🚨 CVE-2026-53921 - odhcpd OpenWrt odhcpd における重大なスタックベースバッファオーバーフロー リモートから認証なしで悪用可能なスタックベースバッファオーバーフローであり、root権限 によるリモートコード実行 RCE を許す可能性があります。 📖 概要 ⚡ 説明 CVE-2026-53921 は、OpenWrt の DHCPv6サーバー odhcpd に影響を与える重大なスタックベースバッファオーバーフロー です。 リモートの認証されていない攻撃者が、特別に細工された DHCPv6 REQUEST...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-远程代码执行漏洞利用 我发现的被分配为 CVE-2026-47301 的概念验证漏洞利用链，针对 Microsoft Configuration Manager SCCM，结合了访问控制缺陷、CAB 解压路径遍历任意文件写入、证书验证绕过以及 DLL 劫持，以实现 SYSTEM 级别的代码执行。 如何使用？ 此漏洞利用使用专门为滥用此 CVE 而构造的恶意 cab 文件，我为此 POC 提供了一个 cab 文件。 该漏洞利用将通过将两个 DLL 植入到从预期路径到 Configuration Manager \bin\X64 安装目录的...

tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

FreePBX-CVE-2025-57819

FreePBX CVE-2025-57819 — SQLi no autenticado a RCE como root Gravedad: Crítica Tipo: Inyección SQL no autenticada → Ejecución remota de código Software afectado: FreePBX módulo endpoint Probado en: FreePBX en CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Resumen Existe una vulnerabilidad de inyecció...

dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

There is a security flaw in Vim. If you use Vim to open a malicious file written by a hacker, and you use the auto-complete feature while typing, the file can secretly force your computer to run unauthorized commands or malware...

vim: Vim: Arbitrary Code Execution via crafted directory names

A flaw was found in Vim, an open-source text editor. This vulnerability, located in the netrw plugin, involves a code injection issue when the editor processes directory paths. A malicious directory name, if crafted by an attacker, could bypass security measures and allow for the execution of...

vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system OS command injection vulnerability exists in the netrw standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the scp://...

vim: Command injection allows arbitrary code execution via malicious tag files

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedd...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

React2Shell-CVE-2025-55182

CVE-2025-55182 — React2Shell React Server Components における Flight プロトコルの安全でないデシリアライゼーションを介した認証不要の RCE。単一の HTTP リクエストでサーバ上で任意のコードを実行できます — 認証情報や事前のアクセスは一切不要です。 root@kitploit: / / / /| |/ / \ / / / / / / / / // / / // / // | // .//,///|| // React Server Components — Flight Protocol RCE...