CVE-2025-55182-TOOLS

CVE-2025-55182 Exploit-Tool CVE-2025-55182 Umfassendes Exploitation-/Erkennungstool Entwickelt vonMingYi Security Lab Funktionen Schwachstellenerkennung : Mehrere Ziele im Batch-Modus auf die Schwachstelle scannen Pfad-Scan : Gängige Server-Action-Endpunkte scannen, um verwundbare Pfade zu...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Nicht authentifizierte Remote-Code-Ausführung-Sicherheitslücke in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data Referenzen CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Entdeckung: Snicco /...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

CVE-2023-4220-PoC

CVE-2023-4220 Upload Arbitrário de Arquivo / RCE - PoC Criei este script para automatizar a exploração da CVE-2023-4220 e obter uma reverse shell na máquina PermX do Hack The Box. Esta vulnerabilidade afeta o Chamilo LMS versões ≤ 1.11.24 , devido à validação insuficiente na funcionalidade big...

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529-

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529- CTT-Enhanced iOS Safari Exploit basato su CVE-2025-43529...

laravel-framework

Über Laravel Hinweis: Dieses Repository enthält den Kerncode des Laravel-Frameworks. Wenn Sie eine Anwendung mit Laravel erstellen möchten, besuchen Sie das Haupt-Laravel-Repository. Laravel ist ein Webanwendungs-Framework mit ausdrucksstarker, eleganter Syntax. Wir glauben, dass Entwicklung ein...

react2shell-scanner-CVE-2025-55182

React2Shell Scanner Enterprise Scanner di vulnerabilità ad alta fedeltà per CVE-2025-55182 e CVE-2025-66478 – vulnerabilità di Esecuzione Remota di Codice in React Server Components / Next.js. 📖 Per analisi tecniche dettagliate, meccanismi di exploit e dati IOC, consultaSECURITY-RESEARCH.md ⚠️...

APACHE-PATH-TRAVERSAL-RCE-CVE-2021-41773-

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE Forschungsprojekt zu Bildungszwecken. Alle Tests wurden in einem isolierten Docker-Lab durchgeführt. Nicht gegen Systeme verwenden, die dir nicht gehören. Zusammenfassung der Schwachstelle Feld| Details ---|--- CVE ID| CVE-2021-41773...

CVE-2025-8110

Gogs RCE-Exploit CVE-2025-8110 Proof of Concept für CVE-2025-8110 – Remotecodeausführung in Gogs über Symlink-Bypass und sshCommand-Injection. Beschreibung Dieser Exploit missbraucht einen Symlink-Bypass in der Gogs-API, um .git/config zu überschreiben und einen bösartigen sshCommand zu injiziere...

CVE-2026-82344

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-82335

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-107707

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

Security Bulletin: Langflow OSS Authenticated Remote Code Execution (RCE) vulnerability exists in the validate_code function

Summary Langflow OSS contains a code injection vulnerability in its code validation endpoint. The endpoint executed submitted function definitions during validation, allowing decorator and default-argument expressions to run. An attacker with access to the endpoint could execute arbitrary command...

CVE-2026-107707

Intego Antivirus for Windows through version 3.0.0.1 is vulnerable to Local Privilege Escalation due to a link following vulnerability in its optimization module. An unprivileged local user can delete arbitrary folders as SYSTEM by replacing a scanned duplicate file's directory with a junction to...

EUVD-2026-95210

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107707 Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...