CVE-2026-91097-CVE-2026-91106

🔬 Присоединяйтесь к Telegram для последних исследований уязвимостей и релизов эксплойтов HPLIP Printer Application — Неаутентифицированный захват администратора Инструмент массовой эксплуатации, нацеленный на HPLIP Printer Application веб-интерфейс на базе PAPPL во всех версиях HPLIP до 3.26.6...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform Execution Environments Update

An update is now available for Red Hat Ansible Automation Platform Execution Environments Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

CVE-2026-96419

A flaw was found in Wireshark. Due to improper pathname validation during configuration profile imports, an attacker could convince a user to import a maliciously crafted profile. Successful exploitation could allow arbitrary code execution or cause an application crash, resulting in a Denial of...

fastjson-rce-lab

Лабораторная среда Fastjson 1.2.83 RCE CVE-2026-16723 Отказ от ответственности: данная лабораторная среда предназначена только для исследований в области безопасности, учебных демонстраций и построения защиты в авторизованных средах. Самовольное тестирование неавторизованных целей может быть...

ROOT-OS-ALPINE-321-CVE-2026-3805 CVE-2026-3805 in curl - Patched by Root

Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

CVE-2025-55182-PoC

⚡ React2Shell Exploit PoC CVE-2025-66478 Next.js Remote Code Execution RCE via Prototype Pollution in Server Components 🕵️‍♂️ Overview This repository contains a Proof of Concept PoC for CVE-2025-66478 also referenced as CVE-2025-55182 in some contexts, a critical vulnerability affecting Next.js...

CVE-2026-19547

A flaw was found in Ghostscript. In Windows environments, the application searches for PostScript resource files in predictable directory paths that do not exist by default. An authenticated local user can exploit this issue by creating the required directory structure and planting a malicious...

Nextjs_Exploit_Tool

Outil d'exploitation RCE Next.js RSC CVE-2025-55182 Description du projet CVE-2025-55182 est une vulnérabilité critique dans la chaîne de traitement des composants serveur RSC de Next.js. Un attaquant, en construisant une requête multipart/form-data spéciale et des blocs de réponse RSC falsifiés,...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 et CVE-2025-40553 Chaîne RCE sans authentification préalable de SolarWinds Web Help Desk Outil de génération d'artefacts de détection pour la chaîne RCE sans authentification préalable de SolarWinds Web Help Desk Description Ce générateur d'artefacts de détection vérifie si une...

BlueDucky

BlueDucky Версия 2.1 Android 🦆 Спасибо всем участникам HackNexus. Обязательно присоединяйтесь к нам в VC! https://discord.gg/HackNexus ПРИМЕЧАНИЯ: Я не смогу запускать это на ноутбуке или другом устройстве, кроме Raspberry Pi, для тестирования. Поэтому любые возникающие проблемы вам придется реша...

CVE-2026-87609

A flaw was found in the Sharing component of Google Chrome on iOS. A remote attacker can exploit this vulnerability to execute arbitrary code outside the application sandbox by sending crafted network traffic. This issue stems from a use-after-free condition, which occurs when the application...

CVE-2026-9082

CVE-2026-9082 Unauthenticated SQL injection in Drupal Core on PostgreSQL via POST /user/login, escalated to remote code execution through PostgreSQL sessionpreloadlibraries. Unlike existing public exploits that target JSON:API, this uses the login endpoint — always available, no modules or...

CVE-2021-42013

CVE-2021-42013 — PoC : Path Traversal + RCE via modcgi contournement du correctif À utiliser uniquement dans des environnements contrôlés et personnels. Ne pas utiliser contre des systèmes sans autorisation. Description PoC développée pour démontrer CVE-2021-42013 , présente dans Apache HTTP Serv...

Zena-CVE-2021-45026

Zena - Preuve de concept d'exploitation XSS stockée à RCE Preuve de concept d'exploitation pour l'application Zena de Rocket Software v. 4.2.1 - XSS stockée à RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html Processus de la POC : Se connecte à la page...

CVE-2026-4883

CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Téléchargement Arbitraire de Fichiers Non Authentifié → Exécution de Code RCE La vulnérabilité provient d'une validation inadéquate du type de fichier dans la fonction piotnetformsajaxformbuilder. Le plugin utilise une liste noire d'extensions incomplèt...

Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

Apple has released updates for iPhones, iPads, and Macs to fix a flaw that could let an attacker run code when a device processes a malicious file. Apple says it may have been used in highly targeted attacks against iPhone users running versions of iOS before iOS 27. The fix is in iOS and iPadOS...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 CVE-2018-7600 용 Python Proof of Concept으로, Drupalgeddon2 라고도 알려져 있습니다. CVE-2018-7600은 특정 버전의 Drupal 7 에 영향을 미치는 치명적인 취약점입니다. 취약한 구성에서 인증되지 않은 공격자가 악성 입력을 주입하고 원격 코드 실행을 달성할 수 있습니다. ⚠️ 면책 조항: 이 프로젝트는 교육 목적, CTF, 보안 연구 및 공인된 침투 테스트 전용입니다. 명시적 허가 없이 시스템에 사용하지 마십시오. 기능 Python 기반...