585431 matches found
react2shell-scanner
Escáner de Vulnerabilidad React2Shell Un escáner seguro y no invasivo para detectar vulnerabilidades de Ejecución Remota de Código en React Server Components RSC y Next.js CVE-2025-55182 y CVE-2025-66478. Descripción general Este escáner ayuda a las organizaciones a identificar si sus servicios w...
CVE-2025-14598
CVE-2025-14598 CVSS: 9.8 Inyección SQL Remota No Autenticada que deriva en Ejecución Remota de Código. Resumen Ejecutivo Se identificó una vulnerabilidad de Inyección SQL en la funcionalidad de inicio de sesión de BET e-Portal, una solución de software ampliamente implementada en instituciones...
Server-Side Request Forgery (SSRF)
Spring Framework is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper handling of XsltView when an application uses an / mapping for view rendering without explicitly specifying the view name, which allows an attacker to trigger unintended server-side requests a...
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash systems or seize root control. All SNMP versions are vulnerable patch now or risk total...
CVE-2025-26686-poc-A-critical-RCE-vulnerability-in-Windows-TCP-IP-stack
This PoC has been validated in a controlled, air-gapped environment. Sensitive exploit details have been removed cut — contact the maintainer for access if you have written authorization...
krle
REACT2SHELL CVE-2025-55182 React2Shell CVE-2025-55182 is a critical remote code execution RCE vulnerability chain affecting Next.js applications that utilize Server Actions. The vulnerability exploits a prototype pollution vulnerability in combination with Server Actions to achieve unauthenticate...
react-cve-2025-55182
react-cve-2025-55182 This is a dump of malware and other suspicious junk I found on the server for my wedding website following the react server side rendering code execution exploit. Its a dinky digital ocean droplet running a fairly pedestrian next js app. The CVE:...
CVE-2024-47176
CVE-2024-47176 — Ejecución Remota de Comandos en CUPS Únicamente para fines educativos y pruebas de penetración autorizadas. Tabla de Contenidos Descripción Sistemas Afectados CVEs Relacionados Requisitos Previos Configuración Uso Aviso Legal Descripción CUPS Common UNIX Printing System es un...
CVE-2025-23968
AI Bud – Generador de contenido AI, Chatbot AI, ChatGPT, Gemini, GPT-4o El plugin AI Bud expone un endpoint de API REST /wp-json/ai-buddy/v1/wp/attachments que permite subir archivos a la biblioteca de medios de WordPress. La lógica de archivos del endpoint contiene funcionalidad de renombrado qu...
CVE-2025-68613-poc-via-copilot
✅ CVE-2025-68613 Análisis completo de la vulnerabilidad de inyección de expresiones RCE en n8n Fecha : 23 de diciembre de 2024 Estado : ✅ RCE verificado completamente Puntuación CVSS : 10.0 Crítico 🎉 Payload RCE exitoso function var require = this.process.mainModule.require; var execSync =...
Blackash-CVE-2025-12762
🔐 CVE-2025-12762 — Vulnerabilidad Crítica de RCE en pgAdmin 4 🚨 ¿Cuál es el problema? Existe una falla de Ejecución Remota de Código RCE en pgAdmin 4 versiones ≤ 9.9. Los atacantes pueden ejecutar comandos arbitrarios en el host cuando pgAdmin se ejecuta en modo servidor y procesa un volcado SQL ...
CVE-2025-13374
Kalrav AI Agent = 2.3.3 - Carga de archivos arbitraria no autenticada a través de la acción AJAX kalravuploadfile El plugin Kalrav AI Agent de WordPress versión 2.3.3 y anteriores contiene una vulnerabilidad de carga de archivos arbitraria que permite a usuarios no autenticados subir archivos PHP...
React2Shell-CVE-2025-55182
🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concept Critical Security Vulnerability Demo - CVSS 10.0 - Remote Code Execution in React Server Components ⚠️DISCLAIMER FOR EDUCATIONAL PURPOSES ONLY! This repository demonstrates a critical security vulnerability. Never use on production...
Astra Linux – Vulnerability in Chromium
The use of after free in ANGLE in Google Chrome before version 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Using use after free in Web Packaging in Google Chrome before version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in Skia in Google Chrome before version 152.0.7977.82 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The inappropriate implementation of passwords in Google Chrome prior to version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
A buffer overflow in WebRTC in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Medium...
OPENSUSE-SU-2026:21950-1 Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...
CVE-2026-12227
The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 45.16.0 . The flaw exists within the vcv-template parameter, which allows unauthenticated attackers to include and execute arbitrary files on the server. This c...