534069 matches found
react2shell-evolved
React2Shell Scanner 用于RSC/Next.js RCE的高保真检测 用于检测React Server Components和Next.js应用程序中远程代码执行（RCE）漏洞的扫描器。 关于 React2Shell Scanner 是一款专用工具，用于识别使用 React Server Components RSC 和 Next.js 的应用程序中的远程代码执行（RCE）漏洞。该工具可检测与以下 CVE 相关的漏洞： CVE-2025-55182 CVE-2025-66478 该工具利用侧信道检测和 RCE 概念验证进行高保真检测，能够通过自动解析 HTTP...
EUVD-2026-83021
IBM MQ Java and JMS client libraries could allow an authenticated attacker to execute arbitrary code on client applications due to a deserialization filter bypass in exception handling...
CVE-2026-10747 IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...
EUVD-2026-83018
IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow in protocol message processing before authentication...
Spring4Shell-POC
Spring4Shell CVE-2022-22965 - Remote Code Execution Proof of Concept A fully containerized Proof of Concept PoC demonstrating the exploitation of Spring4Shell CVE-2022-22965 , resulting in Remote Code Execution RCE against a vulnerable Spring Framework application deployed on Apache Tomcat. The...
EUVD-2026-83129
IBM MQ could allow a remote attacker to cause a denial of service or execute arbitrary code due to a buffer overflow when processing malformed compressed data on channels configured with compression enabled...
CVE-2026-10027
IBM MQ and IBM MQ Appliance are vulnerable to a heap out-of-bounds write (CWE-787 ) when processing malformed compressed data on channels with compression enabled. This vulnerability could allow an unauthenticated remote attacker with network access to the listener port to execute arbitrary code ...
rails-activestorage-vips-audit
rails-activestorage-vips-audit An Agent Skill that audits Ruby on Rails repositories for exposure to CVE-2026-66066 KindaRails2Shell — the Active Storage libvips variant-processing vulnerability that allows arbitrary file read and, in a Rails application, remote code execution. The skill is a...
CVE-2026-66492
Path Traversal en el destino de carga de archivos PhocaCommander ≤ 6.1.3 — Administrador autenticado escribe archivos fuera de la raíz web RESUMEN El controlador de carga de archivos en PhocaCommander construye la ruta de destino a partir de un parámetro folder codificado en base64 y controlado p...
CVE-2025-68937
CVE-2025-68937 - Gitea/Forgejo 模板符号链接 RCE CVE-2025-68937 的自动化概念验证：在 Gitea 和 Forgejo 的模板仓库处理过程中，通过符号链接解引用实现目录遍历，进而导致远程代码执行。 任何已认证用户 （无需管理员权限）都可以获得 git 服务用户的 shell。 漏洞 当从模板生成新仓库时，Gitea/Forgejo 会复制模板文件，并在 .gitea/template 中列出的文件里展开诸如 $REPODESCRIPTION 之类的变量。此过程跟随符号链接 且不进行任何校验，从而允许攻击者读取和写入服务器上的任意文件。 详情...
EXPLOIT-CVE-2026-22778
CVE-2026-22778 — RCE en vLLM en el procesamiento de vídeo Laboratorio vulnerable + prueba de concepto para CVE-2026-22778 CVSS 9.8, una cadena de ejecución remota de código no autenticada en la ruta de ingesta multimodal de vLLM...
CVE-2026-81945
PLANET IGS-5225-8P2T4S industrial managed switch (V1 and V2) contains a stack-based buffer overflow in its web server. The root cause is insufficient bounds checking on data copied into a stack buffer, allowing a remote administrator to trigger a denial of service or potentially execute arbitrary...
EUVD-2026-82991
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...
CVE-2026-81945 PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or...
CVE-2026-41089-Netlogon-RCE-PoC
🛡️ CVE-2026-41089 Netlogon Security Research & AI Security Tool Module Security Research • Defensive Validation • AI Security Tool Integration CVE-2026-41089 Netlogon RCE Scanner & Analysis | AI Security Tool...
CVE-2026-81944
The PLANET IGS-5225-8P2T4S industrial managed switch (V1 and V2) contains a stack-based buffer overflow in its web server component, caused by insufficient bounds checking on data copied into a stack buffer. A remote authenticated attacker can trigger a denial of service or potentially execute ar...
CVE-2026-81944 PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...
CVE-2026-81944 PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...
EUVD-2026-82989
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...