CVE-2025-55182-TOOLS

CVE-2025-55182 शोषण उपकरण CVE-2025-55182 व्यापक शोषण/पहचान उपकरण द्वारा विकसितMingYi Security Lab विशेषताएँ भेद्यता पहचान : एकाधिक लक्ष्यों को भेद्यता के लिए बैच स्कैन करें पथ स्कैनिंग : भेद्य पथों की खोज के लिए सामान्य सर्वर एक्शन एंडपॉइंट्स को स्कैन करें रिमोट कोड निष्पादन : भेद्य लक्ष्यों पर...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data संदर्भ CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup श्रेय खोज: Snicco / Calvin Alkan मूल शोषण: K3ysTr0K3R सफाई और सरलीकरण: Esteban Zárate...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

CVE-2023-4220-PoC

CVE-2023-4220 मनमाना फ़ाइल अपलोड / RCE - PoC मैंने यह स्क्रिप्ट CVE-2023-4220 के शोषण को स्वचालित करने और Hack The Box PermX मशीन पर reverse shell प्राप्त करने के लिए बनाई है। यह कमजोरी Chamilo LMS संस्करण ≤ 1.11.24 को प्रभावित करती है, जो बड़े अपलोड कार्यक्षमता में अपर्याप्त सत्यापन के कारण है। ...

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529-

अभिसरण-समय-सिद्धांत-वर्धित-iOS-Safari-RCE-CVE-2025-43529- CTT-वर्धित iOS Safari शोषण CVE-2025-43529 पर आधारित...

laravel-framework

حول Laravel ملاحظة: يحتوي هذا المستودع على الكود الأساسي لإطار Laravel. إذا كنت ترغب في بناء تطبيق باستخدام Laravel، فتفضل بزيارة مستودع Laravel الرئيسي. Laravel هو إطار عمل لتطبيقات الويب يتمتع ببناء جملة معبرة وأنيقة. نعتقد أن التطوير يجب أن يكون تجربة ممتعة وإبداعية لتكون مرضية حقًا. يحاول...

react2shell-scanner-CVE-2025-55182

React2Shell एंटरप्राइज स्कैनर उच्च-निष्ठा भेद्यता स्कैनर CVE-2025-55182 और CVE-2025-66478 के लिए - React Server Components / Next.js में रिमोट कोड निष्पादन भेद्यताएँ। 📖 विस्तृत तकनीकी विश्लेषण, शोषण तंत्र और IOC डेटा के लिए,SECURITY-RESEARCH.md देखें ⚠️ अस्वीकरण यह उपकरण केवल शैक्षिक और अधिकृत...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 اجتياز المسار / RCE مشروع بحثي تعليمي. تم إجراء جميع الاختبارات في معمل Docker معزول. لا تستخدمه ضد أي نظام لا تملكه. ملخص الثغرة الحقل| التفاصيل ---|--- CVE ID| CVE-2021-41773 البرنامج المتأثر| Apache HTTP Server 2.4.49 فقط نوع الثغرة| اجتياز المسار →...

CVE-2025-8110

Gogs RCE एक्सप्लॉइट CVE-2025-8110 CVE-2025-8110 के लिए प्रूफ ऑफ कॉन्सेप्ट - सिमलिंक बायपास और sshCommand इंजेक्शन के माध्यम से Gogs में रिमोट कोड एक्ज़ीक्यूशन। विवरण यह एक्सप्लॉइट Gogs API में सिमलिंक बायपास का दुरुपयोग करके .git/config को ओवरराइट करता है और दुर्भावनापूर्ण sshCommand इंजेक्ट करता...

CVE-2026-82344

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-82335

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-107707

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

Security Bulletin: Langflow OSS Authenticated Remote Code Execution (RCE) vulnerability exists in the validate_code function

Summary Langflow OSS contains a code injection vulnerability in its code validation endpoint. The endpoint executed submitted function definitions during validation, allowing decorator and default-argument expressions to run. An attacker with access to the endpoint could execute arbitrary command...

CVE-2026-107707

Intego Antivirus for Windows through version 3.0.0.1 is vulnerable to Local Privilege Escalation due to a link following vulnerability in its optimization module. An unprivileged local user can delete arbitrary folders as SYSTEM by replacing a scanned duplicate file's directory with a junction to...

EUVD-2026-95210

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107707 Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...