poc_CVE-2025-68613

PoC: n8n Sandbox Escape CVE-2025-68613 Solo a scopo educativo Questa Proof of Concept dimostra una vulnerabilità critica CVE-2025-68613 in n8n. Non utilizzarla su sistemi di cui non sei proprietario o per cui non hai esplicita autorizzazione. Panoramica della vulnerabilità Le versioni di n8n...

eos

Nemici di Symfony EOS EOS saccheggia informazioni da un target Symfony in modalità debug: Sezione| Descrizione ---|--- General| Ottieni informazioni generali sul target. Phpinfo| Estrai le variabili d'ambiente Symfony dalla phpinfo esposta. Route| Ottieni l'elenco delle route registrate. Log dell...

D-Link

CVE-2024-10914 D-Link Remotecodeausführung RCE D-Link NAS- Befehlsinjektion über den Namensparameter CVE-2024-10914:- Es wurde eine Schwachstelle in D-Link DNS-320, DNS- 320LW, DNS-325 und DNS-340L bis 20241028 gefunden. Sie wurde als kritisch eingestuft. Von dieser Schwachstelle betroffen ist di...

CVE-2026-10036

SpeechBrain versions before 1.1.1 contain an arbitrary code execution vulnerability in its checkpoint recovery mechanism. The root cause is the use of PyYAML's unsafe loader when parsing CKPT.yaml metadata files during candidate enumeration in Checkpointer.recover_if_possible(). An attacker who c...

EUVD-2026-67226

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

CVE-2026-10036 SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary code by supplying a crafted CKPT.yaml checkpoint metadata file parsed with PyYAML's unsafe loader during candidate enumeration in Checkpointer.recoverifpossible. Attackers can...

oldays

oldays öffentliche Exploits...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0 , the default-on Safe import filter sanitizes HTML only for text notes but excludes the book note type. Book note content is stored unsanitized and later injected into the page via jQuery's htm...

EUVD-2026-67224

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2023-27372-PoC

Questa è una proof of concept della vulnerabilità RCE CVE-2023-27372 in SPIP. È un difetto di deserializzazione che sfrutta l'uso pericoloso del tag ENV durante la funzionalità di reset della password spip.php?page=spippass all'interno di /ecrire/balise/formulaire.php. Nello specifico questa riga...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Referenzlink Ursache der Schwachstelle: 1. Wenn ein Angreifer direkt auf die Solr-Konsole zugreifen kann, kann er über eine POST-Anfrage ähnlich wie /Knotenname/config die Konfigurationsdatei dieses Knotens ändern. 2. Apache Solr integriert standardmäßig das...

cve-2013-2094

= Codice per CVE-2013-2094 http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == Come compilare Devi compilare il file C che preferisci in questo modo: gcc -O2 file-name.c -O2 è richiesto a causa del modo in cui l'exploit funziona effettivamente vedi...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel-Exploit Zusammenfassung In diesem Projekt finden Sie eine vollständige Implementierung des zweiten „bpf"-Kernel-Exploits für die PlayStation 4 auf 5.05. Er ermöglicht es Ihnen, beliebigen Code als Kernel auszuführen, um Jailbreaking und Kernel-Level-Modifikationen am System zu...

CVE-2017-16524

CVE-2017-16524 Scoperto da Omar Mezrag - 0xFFFFFF Prodotto interessato Samsung Network Video Recorders - Web Viewer 1.0.0.193 su Samsung SRN-1670D Fornitore del prodotto Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Tipo di vulnerabilità Vulnerabilità di caricamento file senza...

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint Workaround für die Sicherheitslücke „Windows Print Spooler Remote Code Execution“ CVE-2021-34527. Siehe: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Update 2021-07-08: Microsoft hat einen Patch veröffentlicht Microsoft hat bereits...

RP_Import_RCE

Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...