634412 matches found
EUVD-2026-79147
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0171
In multiple locations, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0171
CVE-2026-0171 is an out-of-bounds write in the BigWave component of Google Pixel devices, caused by a logic error in the code. The vulnerability can lead to remote code execution (classified as EoP/High severity in the Pixel bulletin) with only low privileges required and no user interaction need...
CVE-2026-0159
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0159
CVE-2026-0159 is a remote code execution vulnerability in the Cellular Modem of Google Pixel devices, caused by an out-of-bounds write due to a missing bounds check. It requires only low privileges , no user interaction, and is exploitable over the network (CVSS 3.1 base score 8.8 HIGH ). CISA's ...
EUVD-2026-79145
In Cellular Modem, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-55182
CVE-2025-55182 React2Shell Programa de prueba de RCE de React CVE-2025-55182 🔒 Escáner interactivo de RCE CVE-2025-55182 Este script es una herramienta de verificación de vulnerabilidades dirigida a CVE-2025-55182, una vulnerabilidad crítica de ejecución remota de código RCE presente en React...
CVE-2025-55182
CVE-2025-55182 — Componentes de Servidor React RCE sin autenticación Severidad: Crítica — CVSS 10.0 CWE: CWE-502 Deserialización de Datos No Confiables Vendedor: Meta Facebook Divulgado: 3 de diciembre de 2025 Resumen CVE-2025-55182 es una vulnerabilidad de ejecución remota de código RCE sin...
CVE-2021-39273-CVE-2021-39274
CVE-2021-39273 In XeroSecurity Sn1per 9.0 free version, insecure permissions 0777 are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges. CVE-2021-39274 In...
cve-2025-48384-poc
PoC para CVE-2025-48384 Esta prueba de concepto demuestra la vulnerabilidad de análisis incorrecto de submódulos con rutas CR retorno de carro de Git, lo que lleva a la ejecución arbitraria de hooks durante git clone --recurse-submodules. ⚠️ Advertencia Esto es solo para fines educativos y de...
nuclei-template-cve-2025-31324-check
SAP CVE-2025-31324 Check Resumen Esta plantilla está diseñada para comprobar la presencia de la vulnerabilidad SAP NetWeaver CVE-2025-31324. Esta vulnerabilidad permite a usuarios no autorizados subir archivos JSP a través del endpoint /developmentserver/metadatauploader, lo que puede derivar en...
Go-Get-RCE-CVE-2018-6574-POC
CVE-2018-6574 POC ENLACE https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ EJECUCIÓN root@kitploit: go get github.com/neargle/CVE-2018-6574-POC DETALLE El payload está en: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Ahora, con las funcion...
CVE-2026-23918-poc
CVE-2026-23918 — Apache modhttp2 Double Free Afectado: Apache HTTP Server 2.4.66 con modhttp2 + Event MPM Corregido en: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 ALTA — Posible ejecución remota de código no autenticado CWE: CWE-415 Double Free ¿Cuál es la vulnerabilidad modhttp2 en Apache 2.4.66...
CVE-2026-81236
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-81240
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-81239
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2025-57819-exploit
CVE-2025-57819 — SQLi de pre-autenticación a RCE en FreePBX Un exploit todo-en-uno para CVE-2025-57819 , una inyección SQL no autenticada en el módulo endpoint de FreePBX que conduce a la ejecución remota de código mediante la inyección de trabajos cron. CVSS : 9.8 Crítico —...
CVE-2026-61668
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...
CVE-2026-61667
DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetManager.py checkDataset, where...