CVE-2026-79859

The AOS-8 software is vulnerable to unauthenticated buffer overflow vulnerabilities. This flaw can lead to Remote Code Execution (RCE). No specific affected versions, root causes, or remediation details are provided in the documents. No exploitation details or links are available.

CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol

There is a command injection vulnerability in the PAPI protocol Aruba's access point management protocol of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the...

CVE-2026-79857

Technical details for CVE-2026-79857 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79854 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79852 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79851

A vulnerability exists in AOS-10 involving an unauthenticated buffer overflow that can lead to remote code execution . While the provided documents do not specify the exact component or root cause, the high severity score (10.0) indicates a significant risk to confidentiality, integrity, and avai...

CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79847

CVE-2026-79847 identifies unauthenticated buffer overflow vulnerabilities in AOS-10 that can lead to remote code execution . While the provided documents do not specify the exact affected component or root cause, the vulnerability is rated with a CRITICAL CVSS score of 10.0, indicating high impac...

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529-

Convergent-Time-Theory-Enhanced-iOS-Safari-RCE-CVE-2025-43529- CTT-Enhanced iOS Safari Exploit based on CVE-2025-43529...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Proof of concept Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ The python script abuses the upload function that is availible unauthenticated at /admin/files-upload/ The script locally creates a bin folder and a file named...

GoBfuscator

🛡️ GoBfuscator - Advanced Go Code Obfuscation Tool 🔍 Overview GoBfuscator is a professional-grade obfuscation tool specifically designed for Go Golang source code. It provides multiple layers of protection to make reverse engineering difficult while maintaining 100% runtime functionality. Key...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis

SharePoint ToolShell CVE-2025-53770 Incident Analysis Overview This project documents the investigation of a real-world exploitation attempt targeting a SharePoint server using the ToolShell vulnerability CVE-2025-53770. The attack demonstrates a full exploitation chain including remote code...

laravel-framework

About Laravel Note: This repository contains the core code of the Laravel framework. If you want to build an application using Laravel, visit the main Laravel repository. Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable, creative...

THM---Solar-exploiting-Log-4j

THM---Solar-exploiting-Log-4j This room is based on exploiting the notorious Log4j vulnerability CVE-2021-44228, also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages. TASK 1 – CVE-2021-44228...

Malicious code in @pkgship/frpc-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b874d42a9f57d771cd4bb2dac536e6ee9278040e89fe7634bffa4b73217336 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

r2s

React2Shell R2S - CVE-2025-55182 Testing Tool Advanced exploitation testing tool for CVE-2025-55182 vulnerability assessment Features • Installation • Usage • Testing Environment • Legal 📖 What is R2S? R2S React2Shell is a security testing tool designed to help security researchers, developers, a...

CVE-2025-41243-Vulnerability-Lab

CVE-2025-41243: Spring Cloud Gateway RCE Lab Vulnerability Description Spring Cloud Gateway has a SpEL expression injection vulnerability. When the Actuator endpoint is enabled, an attacker can achieve remote code execution RCE. How to Start docker-compose up -d Reproduction 1. Access...

GuardModel

GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...

CVE-2025-55182-TOOLS

CVE-2025-55182 Exploit Tool CVE-2025-55182 Comprehensive Exploitation/Detection Tool Developed byMingYi Security Lab Features Vulnerability Detection : Batch scan multiple targets for the vulnerability Path Scanning : Scan common Server Action endpoints to discover vulnerable paths Remote Code...