Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

MAL-2026-14588 Malicious code in yaml-report-formatter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd762621d7d279a25921e8f8c7d1a7e8040948bd3ac445ca9cabd8f200ce36f0 Package presents itself as a YAML report formatter but its top-level src/yamlreportformatter/init.py starts a daemon thread on import that reads a...

CVE-2016-2555

Exploit CVE-2016-2555 Questo exploit mira a una vulnerabilità di SQL Injection e a una debolezza dell'autenticazione in ATutor 2.2.1. Sfruttando queste vulnerabilità, l'attaccante può caricare codice malevolo per ottenere Remote Code Execution RCE sul server vulnerabile. Utilizzo root@kitploit: $...

CVE-2023-42793

Informazioni su CVE-2023-42793 Dovrai prima ottenere il token utilizzando un exploit diverso. Tuttavia, il seguente exploit ti consentirà di ottenere RCE sul server Linux poiché codifica il payload nell'URL e lo invia al server. Come usare root@kitploit: python3 ./main -t TEAMCITYTOKEN -u...

CVE-2023-27163-AND-Mailtrail-v0.53

Exploit automatico Riepilogo Il seguente exploit abusa della vulnerabilità SSRF di Requests Baskets v1.2.1 per inoltrare l'applicazione interna in esecuzione su 127.0.0.1:80 all'applicazione esterna su /pwned. Una volta che l'applicazione Mailtrail v0.53 è stata inoltrata, eseguirà un comando di...

CVE-2019-18426

Divulgazione delle vulnerabilità di WhatsApp - Open Redirect + CSP Bypass + XSS persistente + permessi di lettura FS + potenziale RCE CVE-2019-18426 Articolo tecnico Documenti originali di divulgazione delle vulnerabilità...

CVE-2025-64087-SSTI-

CVE-2025-64087 SSTI FreeMarker Server-Side Template Injection SSTI in XDocReport allows Remote Code Execution via Apache FreeMarker engine Bug Definition Panoramica della vulnerabilità Server-Side Template Injection SSTI è una vulnerabilità di sicurezza web che consente a un attaccante di inietta...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 : Apache Dubbo — Deserializzazione ed esecuzione di codice remoto...

CVE-2019-9978-Social-Warfare-WordPress-Plugin-RCE

CVE-2019-9978 – Social Warfare WordPress Plugin RCE Dieses Repository enthält einen funktionierenden Python-Exploit für CVE-2019-9978, eine Remote Code Execution-Schwachstelle im Social Warfare Plugin für WordPress Version = 3.5.2. Beschreibung Der Parameter swpdebug in admin-post.php erlaubt es...

fusionpbx_rce_vulnerability

Einleitung Dieser einfache Code versucht, die Implementierung der verketteten Sicherheitslücke abzuschließen, die von Dustin Cobb bei RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX vorgestellt wurde. RCE Reproduktionsschritte 1. Zeigen Sie den anfälligen Operator-Bildschirm in einem...

CVE-2016-3714

CVE-2016-3714 ImageMagick-Codeausführung CVE-2016-3714 imagickbuilder.py = Einfacher Payload-Builder zum Ausnutzen von CVE-2016-3714 imagickbypassshell.php = PHP-basierte Webshell, die den PHP-Imagick-Erweiterungs-Wrapper nutzt, um deaktivierte Funktionen zu umgehen Einige Bilder von...

CVE-2021-44228-demo

log4j-shell-poc Una Proof-Of-Concept per la vulnerabilità CVE-2021-44228 recentemente scoperta. Recentemente è stata scoperta una nuova vulnerabilità in log4j, una libreria di logging Java ampiamente utilizzata in applicazioni come Elasticsearch, Minecraft e molte altre. In questo repository è...

CVE-2026-18393 Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2026-18393

FFmpeg is affected by a heap buffer overflow in the tdsc_load_cursor() function, triggered when processing crafted TDSC cursor data (via cur_fmt_mono cursor). A remote attacker adjacent to the network can exploit this by supplying a specially crafted video file , requiring user interaction and hi...

EUVD-2026-67655

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2026-18393 Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2021-21014

PoC सीमित CVE-2021-21014 Magento संस्करण 2.4.1 और पुराने, 2.4.0-p1 और पुराने और 2.3.6 और पुराने फ़ाइल अपलोड प्रतिबंध बाईपास के लिए संवेदनशील हैं। सफल शोषण एक प्रमाणित हमलावर द्वारा मनमाना कोड निष्पादन की ओर ले जा सकता है। प्रभावित संस्करण: = Magento 2.4.1 उपयोगकर्ता आवश्यकता: केवल मीडिया गैलरी +-...

CVE-2020-10239

Realizzato da HK CVE-2020-10239: Controllo di accesso errato nel campo SQL comfields - RCE PoC Versione interessata: core di Joomla dalla 3.7.0 alla 3.9.15 Requisito utente: account Manager livello più basso nel back-end Accesso ottenuto: cambia il tuo account da Manager a Superadmin, quindi...

CVE-2008-4654

CVE-2008-4654 Ein voll funktionsfähiger Exploit für die stackbasierte Pufferüberlauf-Schwachstelle CVE-2008-4654 im VLC Media Player 0.9.4 von VideoLan bei der Verarbeitung von TiVo-Dateien. Er zielt auf eine 32-Bit-Binärdatei ab, die unter einem 64-Bit-Windows-System läuft, und verwendet einen...