EUVD-2026-82991

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...

CVE-2026-81945 PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...

CVE-2026-41089-Netlogon-RCE-PoC

🛡️ CVE-2026-41089 Netlogon Security Research & AI Security Tool Module Security Research • Defensive Validation • AI Security Tool Integration CVE-2026-41089 Netlogon RCE Scanner & Analysis | AI Security Tool...

CVE-2026-81944

The PLANET IGS-5225-8P2T4S industrial managed switch (V1 and V2) contains a stack-based buffer overflow in its web server component, caused by insufficient bounds checking on data copied into a stack buffer. A remote authenticated attacker can trigger a denial of service or potentially execute ar...

CVE-2026-81944 PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...

CVE-2026-81944 PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...

EUVD-2026-82989

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

CVE-2026-18574

cve-id Donar...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837

XWiki Rendering (org.xwiki.rendering:xwiki-rendering-xml) is affected by an Eval Injection flaw prior to versions 14.10.2 and 15.0 RC1 . Rendering output is included as content of HTML macros without further escaping, allowing an attacker who can edit a document (e.g., their own profile) to close...

CVE-2026-77179

cve-id Donar...

GHSA-26VP-8GXG-V4PG org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

Eval Injection

Overview org.xwiki.rendering:xwiki-rendering-xml is a library for the XWiki Rendering Engine Affected versions of this package are vulnerable to Eval Injection via the printRaw method in XHTMLWikiPrinter in xwiki-rendering-xml. An attacker can execute arbitrary script macros, including Groovy or...

CVE-2025-20352

CVE-2025-20352 — Cisco IOS / IOS XE SNMP 栈溢出 由 Sentinel AI Defense 提供的研究报告。仅供防御性分析——此处未发布任何可用的漏洞利用或 PoC。 Cisco IOS 和 IOS XE 的 SNMP 子系统中存在基于栈的缓冲区溢出漏洞：精心构造的 SNMP 数据包发送至 UDP/161 可覆写栈，使未经身份验证的攻击者获得代码执行能力——直击网络核心。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-20352-cisco-snmp-overflow.html 概述...

CVE-2026-7006

Sublime Text for Windows (Build 4192 / ST4 and Build 3207 / ST3) is vulnerable to a local privilege escalation via its update staging mechanism . An unprivileged local attacker can place a malicious DLL in the user-writable staging directory under %LOCALAPPDATA%, mark it read-only to bypass clean...

cve-2026-63030_60137-wordpress_rce_reproduction

CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress 核心 RCE 链 发现者： Searchlight Cyber（通过 GPT-5.6 Sol） 严重性： 严重 — CVSS 9.8 CVE-2026-63030, CVSS 9.1 CVE-2026-60137 状态： 已被主动利用 — 已加入 CISA KEV 别名： "wp2shell" 概述 这是一个由两个 CVE 组成的 WordPress 核心未认证远程代码执行链：...

WordPress WP Photo Album Plus plugin <= 9.2.09.002 - Authenticated (Subscriber+) Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability

Authenticated Subscriber+ Remote Code Execution via Multipart Upload Filename via ImageMagick Argument Injection vulnerability discovered by daroo in WordPress Plugin WP Photo Album Plus versions = 9.2.09.002...

CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — elFinder 命令注入 PoC elFinder = 2.1.47 中通过 PHP 连接器组件存在的命令注入漏洞。允许未经身份验证的远程攻击者以 Web 服务器用户的身份执行任意代码。 工作原理 上传一个带有恶意文件名的有效 JPEG 文件，文件名中包含 shell 命令。 通过请求图像旋转触发漏洞，该操作将文件名未经清理地传递给 exiftran。 注入的命令将 PHP webshell SecSignal.php 写入服务器。 连接到 webshell 并进入交互式 shell。 使用要求 Python 3 requests 库 pip insta...

CVE-2013-2028-Exploit

Exploit de CVE-2013-2028 Detalles de la vulnerabilidad Software vulnerable: Nginx 1.3.9 Función vulnerable: ngxhttpparsechunked CVE-2013-2028 es una vulnerabilidad de desbordamiento de entero en el analizador de codificación de transferencia fragmentada HTTP de Nginx. Bajo las condiciones objetiv...

CVE-2026-25938-FUXA-Unauthenticated-RCE

CVE-2026-25938 - RCE no autenticado en FUXA 1. ¿Qué es FUXA? FUXA es una plataforma SCADA Control Supervisor y Adquisición de Datos y HMI Interfaz Hombre-Máquina gratuita, de código abierto y basada en web, utilizada para la automatización industrial , IoT y la visualización de procesos en tiempo...