380749 matches found
cve-2025-66478_rce_vulnerable
使用 shadcn/ui 的现代博客 一个使用 Next.js 16、React 19、shadcn/ui 和 Tailwind CSS 构建的现代优雅博客。 重要提示： Next JS 漏洞项目 ，仅为教育、测试和利用目的而创建，不建议在生产环境中安装，仅限本地或受控环境使用 PoC POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113...
CVE-2023-30146
CVE-2023-30146 - Exploit de Cámara Web Assmann/HooToo - Exposición de Datos Sensibles Descripción Se descubrió un problema en las cámaras IP de las marcas HooToo y Assmann. El firmware almacena las credenciales del administrador y del usuario en la copia de seguridad en texto plano. La copia de...
CVE-2024-0044-EXP
CVE-2024-0044-EXP 利用CVE-2024-0044 在Android12、13 2024年3月安全更新之前 下数据备份 用法 ./CVE-2024-0044-EXP.sh sample ./CVE-2024-0044-EXP.sh com.tencent.mm 说明 漏洞发现 https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html 漏洞验证...
opencast-CVE-2021-43821-env
opencast-CVE-2021-43821-env Entorno de la vulnerabilidad de divulgación de información sensible cve-2021-43821 de opencast Artículo de reproducción: https://mp.weixin.qq.com/s/fjna3mHraPmEy1b1wnEYrQ...
s2-048
s2-048 Exp for s2-048, CVE-2017-9791. / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc:...
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence AI pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...
CVE-2026-105826
A security policy bypass exists in the ImageMagick MAT decoder in versions before 6.9.13-55 and 7.x before 7.1.2-30 . A remote attacker can submit a specially crafted MAT image containing highly compressed data that causes the decoder to fail to enforce configured temporary file size limits. This...
EUVD-2026-95010
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...
CVE-2026-105823
Removed by vendor...
CVE-2026-105823 ImageMagick before 7.1.2-31 Policy Bypass in CUT Encoder
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...
CVE-2026-13257 IBM DataPower Gateway Insufficient Verification of Data Authenticity
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signature requests due to improper verification of data authenticity...
CVE-2017-5638
LAB 1 — Inyección OGNL en Apache Struts2 CVE-2017-5638 / S2-045 I. ANÁLISIS DEL SISTEMA Análisis de la superficie de ataque Después de iniciar el contenedor, los registros de Struts2 muestran que la aplicación carga archivos de configuración conocidos como struts-default.xml , struts-plugin.xml y...
CVE-2026-14905
IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an XML external entity injection (XXE) attack. The root cause is the improper restriction of XML external entity references when the softwa...
EUVD-2026-94991
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...
EUVD-2026-94989
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads in maybeunwrappickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when...
CVE-2026-93034
SGLang is affected by an arbitrary code execution vulnerability originating from the ZMQ message decoder . The root cause is the unconditional deserialization of PickleWrapper payloads using pickle.loads() within the _maybe_unwrap_pickle function, which lacks type allowlisting or authentication. ...
CVE-2026-93034 CVE-2026-93034
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads in maybeunwrappickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when...
CVE-2016-2098-my-first-exploit
CVE-2016-2098-my-first-exploit Este exploit es una vulnerabilidad de ejecución remota de código en Ruby-on-Rails cuando se utiliza render sobre datos proporcionados por el usuario. Está escrito en python3, y recuerda instalar la librería requests. Aquí está el comando. pip3 install requests...