CVE-2021-40444-docx-Generate

CVE-2021-40444 docx जनरेट CVE-2021-40444 Microsoft Office Word Remote Code Execution का शोषण करने के लिए .docx जनरेट करें 1. खाली docx फ़ाइल बनाएँ। 2. 'Insert/Object' मेनू में 'Bitmap Image' ऑब्जेक्ट जोड़ें। वस्तु जोड़ें...

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Sandbox de Ameaça Spring4Shell CVE-2022-22965 Visão Geral Este passo-a-passo documenta a conclusão do Desafio Sandbox focado no CVE-2022-22965, comumente conhecido como Spring4Shell — uma vulnerabilidade crítica CVSS 9.8/10 de execução remota de código que afeta versões específicas do framework...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

सैंडबॉक्स चैलेंज: Log4Shell CVE-2021-44228 अवलोकन यह वॉकथ्रू CISA थ्रेट सैंडबॉक्स चैलेंज के लिए CVE-2021-44228, जिसे आमतौर पर Log4Shell के नाम से जाना जाता है, को पूरा करने के लिए उठाए गए कदमों का दस्तावेजीकरण करता है। चैलेंज में दो उद्देश्यों को पूरा करना शामिल था — एक रेड टीम आक्रामक और एक ब्लू...

CVE-2014-4481

CoreGraphics CCITT Corruption de mémoire - CVE-2014-4481 Le framework Apple CoreGraphics ne parvient pas à valider l'entrée lors de l'analyse des données encodées en CCITT groupe 3, ce qui provoque un débordement de tas. Une petite allocation mémoire dans le tas peut être débordée par des données...

Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

An update for sg3utils is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

CVE-2021-23369

CVE-2021-23369 ثغرة أمنية في Handlebars CVE-2021-23369 pip install requests أدخل الرابط : وصف الثغرة الأمنية حزمة handlebars قبل الإصدار 4.7.7 معرّضة لتنفيذ التعليمات البرمجية عن بُعد RCE عند تحديد خيارات تجميع معينة لتجميع القوالب القادمة من مصدر غير موثوق...

CVE-2019-1040

CVE-2019-1040 شرح رائع! استغلال CVE-2019-1040 - دمج ثغرات الترحيل للحصول على RCE ومسؤول المجال . لذا، قمت بكتابة CVE-2019-1040.py لسهولة الاستخدام. يمكنك أيضًا الاطلاع على مستودع exchange2domain الخاص بي: https://github.com/ridter/exchange2domain، طريقة أخرى لاستخدام Exchange للحصول على DC...

CVE-2025-27590

CVE-2025-27590 - Exploit PoC Injeção de Comando via Upload de Formulário Multipart 📌 Descrição Este é um exploit de Prova de Conceito PoC para CVE-2025-27590 , uma vulnerabilidade de injeção de comando que afeta aplicações web que processam uploads de arquivos multipart sem sanitização adequada. ...

CVE-2025-24813

CVE-2025-24813 - Exploit de Execução Remota de Código no Apache Tomcat Este é um exploit de prova de conceito PoC para CVE-2025-24813 , uma vulnerabilidade no Apache Tomcat 9.0.80–9.0.83, 10.1.0–10.1.17 que permite execução remota de código RCE via desserialização de sessão. O exploit abusa de...

CVE-2022-24112

Apache APISIX 2.12.x रिमोट कोड एक्ज़ीक्यूशन RCE शोषण यह Python स्क्रिप्ट Apache APISIX संस्करण 2.12.0 और 2.12.1 में एक रिमोट कोड एक्ज़ीक्यूशन RCE कमजोरी के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC है। यह कमजोरी एडमिन API के भीतर filterfunc Lua फ़ील्ड के दुरुपयोग में निहित है, जो हमलावर को io.popen के माध्यम...

CVE-2021-45232-RCE

Apache APISIX Dashboard RCE root@kitploit: usage: -h -u URL -p PORT -c CMD optional arguments: -h, --help show this help message and exit -u URL, --url URL target url e.g: http://127.0.0.1:9000 -p PORT, --port PORT apisix management port default: 9080 -c CMD, --cmd CMD command default: ifconfig...

CVE-2026-55538

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config"apikey" but createagentsapp does not authenticate POST /agents or POST /agents/agentname. Missing or incorrect bearer and X-API-Key values still reach agent execution. This issue is fixed in...

EUVD-2026-65542

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiateclass in vocos/pretrained.py takes the classpath value from the configuration, splits it into a module and an attribute, imports the module with import, resolves the attribute with...

CVE-2026-79784

Vocos (through 0.1.0 ), a Python library maintained by gemelo-ai, suffers from arbitrary code execution via an unrestricted class_path field in its model configuration. The vulnerable function instantiate_class in vocos/pretrained.py uses __import__ and getattr on a user-supplied dotted path with...

CVE-2026-79774

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape in System\Twig\SecurityPolicy. Authenticated backend users with template-editing permissions can bypass sandbox restrictions by exploiting method forwarding through Eloquent models and query builders (e.g., save...

EUVD-2026-65532

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

cve-2025-55182-test-lab-windows

Teste CVE-2025-55182 React2Shell ⚠️ Aviso : Contém uma vulnerabilidade de execução remota de código RCE realmente funcional. 📋 Índice Visão Geral Informações da Vulnerabilidade Início Rápido Demonstração do Ataque Real Ambiente de Teste Regras de Defesa WAF Estrutura de Arquivos Referências Aviso...

CVE-2026-79675

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function. Attackers can inject dangerous JVM flags such as -agentpath , -javaagent , or @argfile into Stanford wrapper classes, achieving arbitrary code execution . The vulnerability is ra...

CVE-2026-79675 NLTK before 3.10.3 JVM Argument Injection via Per-Call Options

NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...