CVE-2022-42917

In FRRouting FRR before 8.5, the service user usually frr can escalate its privileges to root by monitoring the configuration directory /etc/frr and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused ...

[SECURITY] Fedora 45 Update: elixir-1.20.4-1.fc45

Elixir is a programming language built on top of the Erlang VM. As Erlang, it is a functional language built to support distributed, fault-tolerant, non-stop applications with hot code swapping...

git-vuln-finder

git-vuln-finder gitのコミットメッセージから潜在的なソフトウェア脆弱性を見つけます。 出力形式はJSONで、関連するコミットとそのコミットに含まれる可能性のあるソフトウェア脆弱性の修正情報が含まれます。 検索はコミットメッセージのみに対する正規表現のセットに基づいています。 CVE IDが存在する場合、それらは自動的に出力に追加されます。 入力には任意のgitリポジトリまたはGHアーカイブソースを使用できます。 必要条件 jq sudo apt install jq Python poetry インストール ライブラリとして使用する...

CVE-2026-31431

CVE-2026-31431 — Copy Fail tracking site Source for the Copy Fail patch-status tracker: a single-page site recording which distributions have shipped a fix for the algifaead privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affected and fixed...

log4shell-poc

CVE-2021-44228 Log4Shell POC Overview Proof of Concept for Remote Code Execution via JNDI Injection vulnerability in Apache Log4j 2.14.1. Web Hacking Course - Week 11 Assignment. Environment...

CVE-2026-34197

CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...

CVE-2025-55182

CVE-2025-55182 React2Shell Exploit Kit 🎯 Complete Working Exploit Demonstration This project provides a fully functional demonstration of CVE-2025-55182 React2Shell - a critical Remote Code Execution vulnerability in React Server Components and Next.js. Status: ✅ WORKING - Achieves actual command...

CVE-2025-55182

CVE-2025-55182 — React2Shell Pre-authentication Remote Code Execution in React Server Components RSC, Next.js, and related frameworks. Overview CVE-2025-55182 also referred to as React2Shell is a critical pre-authentication RCE vulnerability affecting the React Server Components RSC ecosystem. An...

CVE-2025-55887

CVE-2025-55887 Description Cross-Site Scripting XSS vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE WinRAR ACEファイル展開パス（CVE-2018-20250）を悪用するためのCによる概念実証コード。 リソース https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ 依存関係...

S2-045-EXP-POC-TOOLS

CNVD-ID CNVD-2017-02474 発行日 2017-03-07 危険レベル 高 AV:N/AC:L/Au:N/C:C/I:C/A:C 影響製品 Apache struts =2.3.5、=2.5、 CVE識別子 CVE-2017-5638 問題 It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to display ...

CVE-2024-4443-Poc

CVE-2024-4443-Poc CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress execute \business-directory-plugin\includes\helpers\class-listing-search.php:88 WPBDPListingSearch-traversetree \business-directory-plugin\includes\helpers\class-listing-search.php:185...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 is a critical path traversal vulnerability in WinRAR that allows arbitrary code execution. Currently exploited by APT groups such as GOFFEE, Bitter APT-C-08 and Gamaredon. 📋 Index...

CVE-2026-43499-pmg110-root

pmg110-root CVE-2026-43499 futex PI rtmutexwaiter use-after-free local privilege escalation, ported to the OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. One file pushed, run over LDPRELOAD: root@kitploit: adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod...

The vulnerability of the command-line interface of the PAN-OS operating system, allowing a perpetrator to execute arbitrary commands

The vulnerability of the command-line interface of the PAN-OS operating system is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands on behalf of the root user...

EUVD-2023-60650

An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload...

PT-2026-91843

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

PT-2026-91724

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use TOCTOU race condition...

PT-2026-91746

The ITE it51xxx I2C driver, when operating as an I2C target slave in buffer mode CONFIG I2C TARGET + CONFIG I2C TARGET BUFFER MODE, copies host-supplied write data into the fixed-size data-target in buffer inside its target FIFO interrupt handler target i2c isr fifo in drivers/i2c/i2c ite...

PT-2026-91741

goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling...