CVE-2026-71963

Hermes Agent versions 0.18.2 through 0.21.0 are vulnerable to remote code execution via a crafted .git/config file in a malicious repository. The agent executes git status or git diff before trust prompts are presented to the user; by setting core.fsmonitor to an attacker-controlled command, an a...

CVE-2024-47176

CVE-2024-47176 ماسح الثغرات الأمنية لنظام CUPS: CVE-2024-47176 الماسح الواسع النطاق لثغرة CUPS CVE-2024-47176 هو أداة متخصصة مصممة لاكتشاف وجود ثغرة CVE-2024-47176 عبر أنظمة متعددة تشغّل نظام الطباعة الشائع في يونكس CUPS. يمكن استغلال هذه الثغرة، التي تؤثر على CUPS من خلال السماح بتنفيذ التعليمات...

CVE-2026-78676

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath. Attackers can craft config files with embedded newlines that become live git directives after any unrelated...

Project-CVE-2026-33017

سكربت CVE-2026-33017 Langflow — شرح الكود برمجة: Xer0TLabs x Persephrak Decentralized Syndicate الغرض من هذا المستند هذا المستند هو شرح عالي المستوى لبرنامج Python المقدم لأغراض المراجعة، والاستجابة للحوادث، والتحليل الدفاعي. وهو لا يتضمن عمدًا تعليمات التشغيل، أو إرشادات اختيار الأهداف، أو أمثلة...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h للمساعدة $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg اضغط ESC واكتب :x للحفظ $ jhead yourfiles.jpg مثال : site.com/youfiles.php?cmd=Command Here...

CVE-2025-10041

CVE-2025-10041 Flex QR Code Generator = 1.2.5 - प्रमाणीकरण रहित मनमाना फ़ाइल अपलोड 🚨 Flex QR Code Generator ≤ 1.2.5 - प्रमाणीकरण रहित मनमाना फ़ाइल अपलोड 📝 विवरण Flex QR Code Generator वर्डप्रेस प्लगइन saveqrcodetodb फ़ंक्शन में फ़ाइल प्रकार सत्यापन की कमी के कारण संस्करण 1.2.5 तक और शामिल मनमाना...

selenium-node-takeover-kit

Эксплойты Metasploit Этот проект переехал. Чтобы получить последнюю версию, выполните pull из https://codeberg.org/JonStratton/selenium-node-takeover-kit Он объединяет некоторые из приведённых ниже примеров для загрузки файлов на узел Selenium, скачивания файлов с него и выполнения кода на нём...

CVE-2025-12737

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

CVE-2026-6071

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

EUVD-2026-70466

A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...

CVE-2026-6071

Rockwell Automation Arena® is affected by a remote code execution vulnerability caused by an out-of-bounds write when parsing DOE files . An attacker can craft a malicious DOE file that, when opened by a legitimate user, writes past the end of an allocated object and executes code within the cont...

CVE-2026-9852

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...

CVE-2026-85168

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node reset a fixed list of command-bearing configuration keys before each operation, but that list did not cover the content-filter and merge-driver key families. A repository with...

CVE-2026-85169

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-76174

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...

CVE-2026-71221

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...

CVE-2026-71220

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2025-12737

CVE-2025-12737 affects WSO2 products via the Carbon Console . Administrative operations within the console do not adequately validate specific user-supplied input, allowing a threat actor with administrative privileges to inject and execute arbitrary code remotely , leading to complete compromise...

EUVD-2025-210842

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell भेद्यता प्रदर्शन परियोजना यह Log4j2 रिमोट कोड निष्पादन भेद्यता Log4Shell के अध्ययन और अनुसंधान के लिए एक प्रदर्शन परियोजना है। ⚠️ सुरक्षा चेतावनी यह परियोजना केवल सुरक्षा अनुसंधान और शैक्षिक उद्देश्यों के लिए है, कृपया उत्पादन वातावरण में उपयोग न करें! इस...