CVE-2026-63030-CVE-2026-60137

CVE-2026-63030 & CVE-2026-60137 — wp2shell RCE без аутентификации в ядре WordPress — Route Confusion + SQL Injection, объединенные в удаленное выполнение кода | ---|--- CVE| CVE-2026-63030 + CVE-2026-60137 Псевдоним| wp2shell Тип уязвимости| REST API Route Confusion → SQL Injection → RCE...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - Vulnérabilité de la chaîne de prototypes des React Server Components Ce POC démontre la CVE-2025-55182 en utilisant le code vulnérable réel de [email protected]. Guide de correctif d'urgence CVE-2025-55182 : analyse complète et atténuation de la vulnérabilité Next.js/React R...

xwiki-cve-2025-24893

XWiki SolrSearch RCE non authentifiée CVE-2025-24893 Contributeurs École Whitehat 4e promotion, classe 25 Im Duyeon@endusdksla Résumé XWiki interprète et rend la syntaxe wiki et les macros côté serveur. Le problème est que la page Main.SolrSearch est ouverte aux invités tout en évaluant le...

fufu-sec

fufu-sec fufu-sec Framework for Uninvited Frequency Usage — это фреймворк безопасности WiFi нового поколения для персонального и корпоративного аудита беспроводных сетей. Он покрывает всю поверхность атак сетей 802.11 из единой браузерной панели управления: обнаружение сетей, захват handshake,...

CVE-2022-1388-POC

CVE-2022-1388 POC par PsychoSec POC amélioré pour CVE-2022-1388 qui affecte plusieurs produits F5. Ceci est une version améliorée du Proof of Concept d'Horizon3 pour CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 Cette version contient de multiples améliorations ainsi qu'un shell...

CVE-2021-3156-plus

CVE-2021-3156 Ceci est une modification du dépôt basée sur @CptGibbon et prend en charge l'exécution de commandes arbitraires. 相关阅读：CVE-2021-3156 - Exploit修改 PoC du shell root pour CVE-2021-3156 sans bruteforce À des fins éducatives, etc. Testé sur : @CptGibbon Ubuntu 20.04 avec sudo 1.8.31...

CVE-2025-49113

CVE-2025-49113 Exploit Roundcube Un exploit Python pour CVE-2025-49113, ciblant une vulnérabilité dans le webmail Roundcube qui permet l'exécution de code à distance via une désérialisation d'objet PHP. Aperçu Cet exploit exploite une vulnérabilité de désérialisation dans la fonctionnalité de...

CVE-2026-105166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

CVE-2026-105146: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql...

Nebula AI-Powered Penetration Testing 0.1.0

Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...

CVE-2026-105149: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument rating results in sql injection. The attack may be initiated remotely. The exploit has been released to the public a...

CVE-2026-105167: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

PT-2026-104615

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor versions prior to 2.0.21 Description Unlimited Elements for Elementor contains a blind SQL injection flaw. This issue allows unauthenticated remote attackers to extract arbitrary database records by failing to...

CVE-2026-105134: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Executing a manipulation of the argument random can lead to os command injection. It is possible to launch the attack...

CVE-2026-105158: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql injection. The attack can be executed...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:22009-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22009-1 advisory. This update for jline3 fixes the following issue: Update to upstream version 3.30.17: Security Fixes + Native Stack Buffer Overflow in Public...

CVE-2026-103355: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor...

N0xis

N0xis 실행 중인 프로세스의 하드웨어 워치포인트에서 값을 변경한 정확한 디컴파일된 명령문까지. 메모리 스캐너는 주소 를 찾는다. 디컴파일러는 코드 를 설명한다. N0xis가 이 둘을 연결한다. $ n0x provenance trace --pid 9348 --addr 0x7ff68bef3010 --kind write "functionva": "0x7ff68bef1580", // containing function, auto-resolved "decompiledcontext": "rax.2 =...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Неаутентифицированное удаленное выполнение кода в Oracle E-Business Suite CVSS 9.8 КРИТИЧЕСКИЙ Обзор CVE-2025-61882 — это неаутентифицированная уязвимость удаленного выполнения кода в Oracle E-Business Suite EBS, затрагивающая компоненты Concurrent Processing и BI Publisher. Эта...

CVE-2026-63030-CVE-2026-60137-wp2shell-poc

wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Описание pocwptot.py — это proof‑of‑concept PoC для эксплуатации уязвимости time‑based blind SQL injection в конечной точке batch WordPress REST API, и проведения цепочки эскалации до Remote Code Execution RCE. Проверяемые...