756780 matches found
CVE-2026-82041 UTMStack < 11.2.16 Missing Authorization via Command WebSocket
UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand, the handler mapped to the /command/hostname STOMP destination, where no role check or command allowlist is applied before forwarding supplied commands. Any authenticated user,...
CVE-2026-82041
UTMStack versions before 11.2.16 are vulnerable to a missing authorization flaw in the UTMIncidentCommandWebsocket.processCommand() function. Specifically, the handler mapped to the /command/{hostname} STOMP destination fails to perform role checks or apply a command allowlist. This allows any au...
EUVD-2026-91796
UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand, the handler mapped to the /command/hostname STOMP destination, where no role check or command allowlist is applied before forwarding supplied commands. Any authenticated user,...
CVE-2026-82041 UTMStack < 11.2.16 Missing Authorization via Command WebSocket
UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand, the handler mapped to the /command/hostname STOMP destination, where no role check or command allowlist is applied before forwarding supplied commands. Any authenticated user,...
CVE-2026-82041 UTMStack < 11.2.16 Missing Authorization via Command WebSocket
UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand, the handler mapped to the /command/hostname STOMP destination, where no role check or command allowlist is applied before forwarding supplied commands. Any authenticated user,...
CVE-2022-0944_RCE_Automation
ๆไธๆฏๅ็ฐ่ฏฅๆผๆด็็ ็ฉถไบบๅ๏ผๅชๆฏ่ฟๆฎตไปฃ็ ็ไฝ่ ใ ๆญคไปฃ็ ไป ไพๆ่ฒ็ฎ็ไฝฟ็จใ...
CVE-2026-104019
An OS command injection vulnerability exists in the Studio Space startup validation script of Amazon SageMaker Distribution (versions 2.x < 2.14.12, 3.x < 3.9.12, 4.0.x < 4.0.11, 4.1.x < 4.1.11, 4.2.x < 4.2.8, 4.3.x < 4.3.5, and 4.4.x
CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...
CVE-2026-104019 OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might...
CVE-2025-49844
๐จ CVE-2025-49844 โ โRediShellโ ๅ จ็ๆๅฟซๅ ๅญๅญๅจไธญ็ไธฅ้่ฟ็จไปฃ็ ๆง่กๆผๆด Redis Lua ่ๆฌๆง่กๅบๅ็ฐๅทฒๆไธบ่ฎค่ฏๅ็ๅฎ็พ็้็นใ ็ป่ฟ่ฎค่ฏ็ๆปๅป่ โ ็ฒพๅฟๆ้ ็ Lua ่ๆฌ โ ้้ธๆฒ็ฎฑ โ ๅจๅฎฟไธปๆบไธๅฎ็ฐๅฎๅ จ RCE โ ๏ธ ๆฆ่ฟฐ CVE-2025-49844 ๏ผโRediShell โ๏ผๆฏ Redis ๅตๅ ฅๅผ Lua ่ๆฌๅผๆไธญไธไธชไธฅ้็้ๆพๅไฝฟ็จ๏ผUAF๏ผๅ ๅญ็ ดๅๆผๆด ใ ไธไธช็ป่ฟ่ฎค่ฏ็ ็จๆท้่ฟ EVAL/EVALSHA ๆไบคไธไธช็ฒพๅฟๆ้ ็ Lua ่ๆฌ๏ผ่ฏฅ่ๆฌๆ็บตๅๅพๆถ้ๅจ๏ผๅจ่งฃๆ/ๆง่ก่ฟ็จไธญ่งฆๅ UAF๏ผ้้ธ Lua...
CVE-2024-32002-poc
Bash ่ๆฌ๏ผ !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path telltalepath="$PWD/tell.tale" Initialize hook...
threat-intel-cve-2024-3094
ๅจ่ๆ ๆฅๆฅๅ๏ผCVE-2024-3094 โ XZ Utilsๅ้จ ่ฏฅไปๅบๅ ๅซไธไปฝๅจ่ๆ ๆฅๆฅๅ๏ผๅๆไบCVE-2024-3094 โโ2024ๅนดๅจxz-utilsๅ็ผฉๅทฅๅ ทไธญๅ็ฐ็ไธไธชๅคๅๅ ณๆณจ็ๅ้จๆผๆดใ CVE-2024-3094 ๆฏไธไธชไธฅ้็ไพๅบ้พๅฆฅๅไบไปถ๏ผๆถๆๅ้จ่ขซๆๅ ฅๅฐxzๅ็ผฉๅบไธญ๏ผๅฝฑๅไบ็นๅฎ็ๆฌ๏ผ5.6.0ๅ5.6.1๏ผใ่ฏฅๅ้จ้่ฟsystemdๅ ่ฎธSSH่ฎค่ฏไธญ็่ฟ็จไปฃ็ ๆง่ก๏ผๅฏนLinux็ณป็ปๆๆไธฅ้้ฃ้ฉใ ๆผๆด็ผๅท : CVE-2024-3094 ไธฅ้ๆง : ไธฅ้ CVSS: 10.0 ๅๅฝฑๅ่ฝฏไปถ : xz-utils 5.6.0 ๅ 5.6.1 ๅฉ็จๆนๆณ :...
CVE-2008-4687-exploit
CVE-2008-4687-exploit ้ๅฏนCVE-2008-4687็ๅฟซ้ไธ็ฒ็ณ็pythonๆผๆดๅฉ็จ็จๅบใ NISTๆ่ฟฐ๏ผ Mantis 1.1.4ไนๅ็ๆฌไธญ็manageprojpage.phpๅ ่ฎธ่ฟ็จ่ฎค่ฏ็จๆท้่ฟๅ ๅซPHPๅบๅ็sortๅๆฐๆง่กไปปๆไปฃ็ ๏ผ่ฟไบPHPๅบๅ็ฑcore/utilityapi.phpไธญ็multisortๅฝๆฐๅ ็createfunctionๅค็ใ...
CVE-2025-55182
RSC Detector - React Server Components ๆผๆดๆซๆๅจ ไธไธชๅบไบ Python ็ๅฎๅ จๆซๆๅจ๏ผ็จไบๆฃๆตๅๅฉ็จ Next.js ๅบ็จไธญ็ React Server Components RSC ๆผๆดใ่ฏฅๅทฅๅ ทๆฏๆ่ขซๅจๆฃๆตใไธปๅจๆ็บน่ฏๅซๅ RCE ๆผๆดๅฉ็จๆต่ฏใ โ ๏ธ ่ญฆๅ ๏ผๆฌๅทฅๅ ทไป ็จไบๆๆ็ๅฎๅ จๆต่ฏ ใๆช็ปๆๆ่ฎฟ้ฎ่ฎก็ฎๆบ็ณป็ปๆฏ้ๆณ็ใๅจ่ฟ่กๆต่ฏๅ๏ผ่ฏทๅกๅฟ ่ทๅพไนฆ้ข่ฎธๅฏใ ๅ่ฝ็นๆง โ ่ขซๅจๆฃๆต - ๅๆ HTMLใๅๅบๅคดๅ้กต้ข็ปๆไธญ็ RSC ๆๆ โ ไธปๅจๆ็บน่ฏๅซ - ๅ้ RSC ็นๅฎๅคด้จไปฅๆฃๆตๆๅกๅจๅๅบ โ HTTP ๅคด้จๅๆ - ่ฏๅซ...
ephemora-cell
Ephemora Cell Ephemora Cell ๆฏไธ็ง่ฝป้็บงๅฎๅ จไธๆง่กๅ่ฏญ๏ผ็จไบๅจ AI ไปฃ็ใMCP ๅทฅๅ ทใๆไปถๅๅบ็จ็จๅบๅ ้จ่ฟ่กไธๅไฟกไปป็ไปฃ็ ใ Run untrusted code. Control its capabilities. Bound its resources. Record what happened. ไธไธบ AI ไปฃ็ใMCP ๅทฅๅ ทใๆไปถใไปฃ็ ่งฃ้ๅจๅๅ ถไปไธๅไฟกไปป็ๅทฅไฝ่ด่ฝฝ ่ๆๅปบใ AI Agent / Application โ โผ Tool / Plugin / MCP โ โผ โโโโโโโโโโโโโโโโโโโโโโโโโ โ Ephemora...
CVE-2019-15107
CVE-2019-15107 CVE-2019-15107 webmin python3็ผๅ ็จๆณpython CVE-2019-15107.py https://172.16.20.134:10000 whoami...
CVE-2023-38646
CVE-2023-38646 ๆฆๅฟต้ช่ฏ๏ผPoC๏ผ ๆ่ฟฐ ่ฟๆฏไธไธช็จไบๅฉ็จ Metabase๏ผไธๆฌพๅผๆบๅไธๆบ่ฝๅๆฐๆฎๅๆๅทฅๅ ท๏ผ็ๆฆๅฟต้ช่ฏ๏ผPoC๏ผ่ๆฌใMetabase ๅ ่ฎธ็จๆทๅฏ่งๅๅนถไบคไบๅผๅฐๅค็ๅ ถๆฐๆฎ๏ผไฝฟๅ ถๆไธบๅผบๅคง็ๆฐๆฎๅๆๅนณๅฐใ ่ฏฅๆผๆด็ผๅทไธบ CVE-2023-38646๏ผๅ ่ฎธๆปๅป่ ๅจๆ ้ไปปไฝ่บซไปฝ้ช่ฏ็ๆ ๅตไธๅจๆๅกๅจไธๆง่กไปปๆๅฝไปคใๆญค็ผบ้ท็ๅฝฑๅๅๅไธฅ้๏ผๅ ไธบๅฎไปฅๆๅกๅจ็็นๆ็บงๅซๆไบไบๅฏนๆๅกๅจ็ๆชๆๆ่ฎฟ้ฎๆ้ใ ๆฆๅฟต้ช่ฏ๏ผPoC๏ผๆญฅ้ชค ๅ ้ๆญคไปๅบ git clone https://github.com/threatHNTR/CVE-2023-38646.git ่ฟๅ ฅไปๅบ็ฎๅฝ cd...
CVE-2025-55182-realistic-poc
CVE-2025-55182๏ผReact ๆๅก็ซฏ็ปไปถ RCE ไธไธชๆๅฐ็ๆฆๅฟต้ช่ฏ๏ผๅฑ็คบไบ [email protected] ไธญ็ไธฅ้่ฟ็จไปฃ็ ๆง่กๆผๆดใ ไปไนๆฏ CVE-2025-55182๏ผ ไธไธช้ข่ฎค่ฏ็ RCE ๆผๆด๏ผๅญๅจไบ React ๆๅก็ซฏ็ปไปถไธญ๏ผๆปๅป่ ๅฏไปฅๅจไฝฟ็จๆๅๆปๅป็ react-server-dom-webpack ๅ ๏ผ็ๆฌ 19.0.0 - 19.2.0๏ผ็ๆๅกๅจไธๆง่กไปปๆไปฃ็ ใ CVSS ่ฏๅ๏ผ 10๏ผไธฅ้๏ผ ๅๅฝฑๅๅ react-server-dom-webpack 19.0.0, 19.1.0, 19.1.1, 19.2.0...
WordPress Beaver Builder Page Builder โ Drag and Drop Website Builder plugin <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution vulnerability
Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Samuele Santonicola in WordPress Plugin Beaver Builder versions = 2.11.0.5...
CVE-2016-2555
CVE-2016-2555 ๆผๆดๅฉ็จ ๆญคๆผๆดๅฉ็จๅทฅๅ ท้ๅฏน ATutor 2.2.1 ไธญ็ SQL ๆณจๅ ฅๆผๆด ๅ ่ฎค่ฏๅผฑ็นๆผๆด ใ้่ฟๅฉ็จ่ฟไบๆผๆด๏ผๆปๅป่ ๅฏไปฅไธไผ ๆถๆไปฃ็ ๏ผๅจๆๅๆปๅป็ๆๅกๅจไธๅฎ็ฐ ่ฟ็จไปฃ็ ๆง่ก๏ผRCE๏ผ ใ ็จๆณ $ python3 CVE-2016-2555.py target:port ็คบไพ๏ผ $ python3 CVE-2016-2555.py 127.0.0.1:8080 ๅ่ฝ็น็น ๅฉ็จ ATutor 2.2.1 ไธญ็ SQL ๆณจๅ ฅๆผๆดใ ็ป่ฟ่บซไปฝ้ช่ฏไปฅ่ทๅพ็ฎก็ๅๆ้ใ ไธไผ ๆถๆ่ด่ฝฝไปฅๅฎ็ฐ RCEใ ๅ ่ดฃๅฃฐๆ...