CVE-2025-65754

CVE-2025-65754：Algernon 1.17.4 中的存储型 XSS 描述 Algernon v1.17.4 存在跨站脚本（XSS）漏洞，攻击者可通过精心构造的文件名有效载荷执行任意代码。 受影响项目：Algernon - 1.17.4 项目维护者：Alexander F. Rødseth xyproto 漏洞类型：跨站脚本（XSS） 攻击向量：攻击者可上传包含恶意名称的文件，以更改网站内容或窃取 Cookie 劫持会话。 部分变量未进行清理。 例如： engine/dirhandler.go 第 80-108 行 root@kitploit: filename :=...

CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerabilidad 1. Explicación sobre la Vulnerabilidad: CVE-2025-55182 “React2Shell” es una vulnerabilidad crítica de Ejecución Remota de Código RCE dentro de React Server Components RSC — específicamente en la lógica de deserialización del protocolo React Flight. Afecta...

CVE-2021-3007-docker-poc

CVE-2021-3007 — RCE por deserialización HTTP en Laminas/Zend Este repositorio contiene una prueba de concepto totalmente reproducible y una plantilla de exploit de Nuclei para CVE-2021-3007, una vulnerabilidad crítica de deserialización de PHP en Zend\Http\Response\Stream laminas-http plantilla d...

Rust_CVE-2025-55182

Herramienta de explotación CVE-2025-55182 Versión Rust Resumen del proyecto Este proyecto es una herramienta de investigación de seguridad desarrollada en Rust, dirigida a la vulnerabilidad de ejecución remota de código RCE presente en [email protected]. Esta vulnerabilidad permite a un...

CVE-2021-21220

Explotación de CVE-2021-21220 Desde un Comportamiento Incorrecto de JIT hasta la Ejecución Remota de Código Resumen Esta presentación explica la explotación de CVE-2021-21220 , una vulnerabilidad en el motor JavaScript V8 de Google Chrome causada por suposiciones incorrectas del compilador JIT...

USN-8722-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. CVE-2026-66032 It was discovered that libssh2 incorrectly handled AES-GCM cipher...

USN-8719-1: APR-util vulnerabilities

It was discovered that APR-util incorrectly performed password hash comparisons in a way that was not constant-time. An attacker could possibly use this issue to obtain sensitive information. CVE-2025-49506 It was discovered that APR-util incorrectly handled recursive XML element quoting. An...

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Sandbox de Amenaza Spring4Shell CVE-2022-22965 Resumen Este tutorial documenta la finalización del Desafío Sandbox centrado en CVE-2022-22965, comúnmente conocido como Spring4Shell — una vulnerabilidad crítica CVSS 9.8/10 de ejecución remota de código que afecta versiones específicas del framewor...

Vulnerability-Assessment-Exploitation-Lab

مختبر تقييم الثغرات والاستغلال مختبر اختبار الاختراق Metasploitable 2 الملخص التنفيذي يوثّق هذا المشروع اختبار اختراق ناجحًا بكامل دورة حياته ضد بيئة Metasploitable 2 لنظام لينكس. يتبع التقييم معيار تنفيذ اختبار الاختراق PTES ، ويغطي الاستطلاع الأولي والاستغلال واستعادة بيانات الاعتماد في مرحلة م...

htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 Resumen Nexus es una máquina Linux de dificultad fácil de Hack The Box que presenta una cadena de ataque basada en enumeración de hosts virtuales, descubrimiento de credenciales expuestas, explotación de una aplicación web...

EUVD-2026-70449

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...

CVE-2026-71221

gfs2-utils is affected by a stack out-of-bounds write in the savemeta function, where the height value from on-disk inode metadata is used as a loop bound without bounds checking. This can cause a stack buffer overflow leading to arbitrary code execution when processing crafted GFS2 filesystem im...

CVE-2026-71221 Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...

CVE-2026-71220

A stack out-of-bounds write vulnerability in gfs2-utils (specifically the gfs2_edit tool) occurs when the di_height field from on-disk inode metadata is used as an array index without bounds checking, resulting in a stack buffer overflow. Processing a crafted GFS2 filesystem image may lead to arb...

EUVD-2026-70448

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2026-71221

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...

CVE-2026-71220 Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2026-71220

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

Desafío Sandbox: Log4Shell CVE-2021-44228 Resumen Este recorrido documenta los pasos realizados para completar el Desafío Sandbox de Amenazas de CISA para CVE-2021-44228, comúnmente conocido como Log4Shell. El desafío implicó completar dos objetivos — uno de equipo rojo ofensivo y uno de equipo...