CVE-2026-13046 Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution

A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling samld allows an attacker who has already obtained the ability to write files on the appliance to execute arbitrary code in the context of the samld service by causing samld to load a...

CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

relatorio-n8n.md

TryHackMe 보고서 — n8n: CVE-2025-68613 취약점: CVE-2025-68613 공개일: 19/12/2025 CVSS: 9.9 심각 요약 n8n의 표현식 삽입 취약점에 대한 익스플로잇 및 분석 보고서로, 원격 코드 실행RCE이 가능합니다. 환경, 단계, 테스트된 페이로드, 증거 및 권장 사항을 문서화합니다. 목표 TryHackMe 룸에서 익스플로잇 재현. 명령어 및 증거 문서화. 완화 및 탐지 제안. 테스트 환경 OS: Linux 배포판 및 버전 입력 테스트한 n8n 버전: 입력 네트워크: 격리된 환경 / ...

CVE-2026-103041

LightLLM versions through 1.2.0 in multimodal deployments are vulnerable to Remote Code Execution (RCE) . The flaw exists because an unauthenticated RPyC cache service is exposed on all interfaces with pickle deserialization enabled. An attacker can send crafted serialized objects to the exposed ...

CVE-2026-103040

LightLLM versions through 1.2.0 are vulnerable to remote code execution (RCE) within the router profiler service when the --enable_profiling flag is used. The root cause is the exposure of an unauthenticated RPyC server with pickle deserialization enabled. This allows an attacker to execute arbit...

CVE-2026-103041 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges...

CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

CVE-2026-103041 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges...

CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

CVE-2026-103041 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges...

CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - 임의 파일 업로드로 인한 원격 코드 실행 RCE 제품 BiggiDroid – 간단한 PHP 블로그 CMS 제품 페이지: https://biggidroid.com/product/simple-php-blog/ 취약점 유형 임의 파일 업로드 무제한 파일 업로드 원격 코드 실행 RCE 심각도 치명적 CVSS 추정: 9.8 AV:N / AC:L / PR:L / UI:N / S:U / C:H / I:H / A:H 요약 Simple PHP Blog CMS 에는 관리자 패널의 사이트 로고 업로드 기능 에 무제한...

CVE-2026-91191

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

CVE-2026-84409

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update...

cve-2026-87902-poc

CVE-2026-87902 — WordPress Core: 페이지 템플릿 해석에서의 비인증 경로 순회 WordPress Core에서 이중 인코딩된 pagename 값을 통한 비인증 로컬 PHP 파일 포함 — 그리고 특정 배포 조건에서는 웹 서버 계정의 권한으로 PHP 코드 실행. | ---|--- CVE| CVE-2026-87902 벤더 권고| GHSA-7hp8-65ch-5whp 분석 글| CVE-2026-87902: Critical WordPress file inclusion and conditional RCE 영향 범위|...

CVE-2026-102930

A flaw was found in virtualenv. When fetching seed packages such as pip or setuptools during environment creation or updates, virtualenv does not verify the integrity of downloaded files against authoritative cryptographic checksums. A network attacker or compromised mirror could substitute...

CVE-2026-102925

A flaw was found in virtualenv. The generated activation scripts for shells such as bash, zsh, and fish apply improper quoting to environment and library path variables. An attacker can exploit this by providing a crafted virtual environment path containing shell metacharacters. When an...

CVE-2026-70356

The Toptech TMS7 and TopHAT systems are vulnerable to an unrestricted file upload flaw in the TMS file upload endpoint . Due to a lack of server-side file type restrictions , an attacker with high privileges can upload and execute arbitrary PHP files on the web server. This vulnerability has a CR...

DEBIAN-CVE-2026-102925

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...

CVE-2026-102925

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.13, the generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In the bash and zsh script, a crafted virtual environment path...