CVE-2020-5902

CVE-2020-5902 F5 BIG-IP Interfaccia utente di gestione del traffico TMUI - Esecuzione di codice in remoto Nelle versioni BIG-IP 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 e 11.6.1-11.6.5.1, l'interfaccia utente di gestione del traffico TMUI, nota anche come utilità di...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server Authentifizierte Remote-Codeausführung RCE Eine Schwachstelle im Produkt Oracle WebLogic Server von Oracle Fusion Middleware Komponente: Console. Betroffene unterstützte Versionen sind 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 und 14.1.1.0.0. Die leicht...

CVE-2020-0688

CVE-2020-0688 Microsoft Exchange Server - Esecuzione di codice in remoto RCE tramite chiave crittografica fissa Invece di avere chiavi generate casualmente per ogni installazione, tutte le installazioni di Microsoft Exchange Server hanno gli stessi valori validationKey e decryptionKey in...

CVE-2017-9822

CVE-2017-9822 Deserializzazione del cookie DotNetNuke – Esecuzione remota di codice RCE Le versioni di DotNetNuke DNN comprese tra 5.0.0 e 9.3.0 sono affette da una vulnerabilità di deserializzazione che porta all'esecuzione remota di codice RCE. DotNetNuke utilizza il cookie DNNPersonalization p...

bash-apocalypse

Bash Apocalypse Kit di sfruttamento automatizzato per CVE-2014-6271 Shellshock Un progetto completo di ricerca sulla sicurezza che dimostra la vulnerabilità Shellshock che ha colpito milioni di server nel 2014. Include scansione automatizzata, capacità di sfruttamento e raccomandazioni difensive...

CVE-2019-11447

CVE-2019-11447 - PoC Sfrutta CuteNews 2.1.2 tramite controlli deboli sul caricamento dei file utilizzati per caricare un'immagine avatar, portando a RCE. Installazione Clona il repository e installa i requisiti. pip install -r requirements.txt Utilizzo Per caricare un avatar è necessario un accou...

CVE-2023-46604

CVE-2023-46604 Exploit für CVE-2023-46604 Dieses Tool hilft, diese Schwachstelle auszunutzen. Shodan-Abfrage zum Finden von Zielen: root@kitploit: product:"ActiveMQ" port:"61616" Verwendung des Tools: root@kitploit: zum Lesen von Zielen aus der Datei: python3 exploit.py -f targets -c...

CVE-2024-38077

CVE-2024-38077 Ecco una possibile descrizione GitHub per CVE-2024-38077: CVE-2024-38077: Vulnerabilità di esecuzione di codice remoto nel servizio di licenza Desktop remoto di Windows Panoramica: CVE-2024-38077 è una vulnerabilità critica nel servizio di licenza Desktop remoto di Windows, che...

CVE-2026-81735 UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

CVE-2026-81735

UI-TARS-desktop (ByteDance) — the mcp-http-server package defaulted its listen address to :: when no host was supplied, binding Streamable HTTP and SSE MCP transports to every network interface. Authentication middleware was optional, and the @agent-infra/mcp-server-commands and @agent-infra/mcp-...

EUVD-2026-67069

opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...

CVE-2026-81719 openssl_encrypt before 1.4.9 Remote Code Execution via Plugin

opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...

CVE-2026-81719

openssl_encrypt versions before 1.4.9 are vulnerable to arbitrary code execution via third-party plugins. The plugin signature policy defaulted to WARN , allowing unsigned or unverifiable non-built-in plugins to be compiled and executed in the host process at import time—before the runtime sandbo...

CVE-2026-81719 openssl_encrypt before 1.4.9 Remote Code Execution via Plugin

opensslencrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and executed in the host process at import time, before the runtime sandbox is installed. The...

CVE-2026-68515

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

CVE-2026-81701

openssl_encrypt versions before 1.4.9 contain an arbitrary code execution vulnerability in its plugin signature verification mechanism. The root cause is a denylist approach used to identify trusted built-in plugins: unsigned plugins placed in top-level plugins/ directories or unknown subdirector...

CVE-2026-81700 openssl_encrypt before 1.4.9 GPG Signature Verification Bypass

opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...

EUVD-2026-67056

opensslencrypt versions before 1.4.9 contain a signature verification vulnerability in gpgrunner.verifydetached that accepts revoked and expired keys by only checking VALIDSIG status without inspecting REVKEYSIG, EXPKEYSIG, or gpg exit codes. Attackers holding compromised-then-revoked signing key...

CVE-2026-81701 openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin

opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...

CVE-2026-81701 openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin

opensslencrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signature verification. Attackers can place malicious unsigned plugins following documented installation paths...