CVE-2026-94030

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

Security Bulletin: Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 4.0

Summary Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 4.0. The libraries affected include tomcat-embed-core-9.0.110.jar, i18next-http-backend-2.2.0.tgz, spring-web-5.3.39.jar, assertj-core-3.22.0.jar, ability-6.4.0.tgz, netty-codec-http-4.1.128.Final.jar,...

ZigRaceExploit

CVE-2021-25741 — TOCTOU Symlink Race Exploit in Zig Educational exploit of the TOCTOU Time Of Check, Time Of Use race condition behind CVE-2021-25741, a vulnerability in the Kubernetes kubelet. The project demonstrates locally without a K8s cluster how a concurrent symlink swap can bypass a path...

CVE-2009-2265

cf8-upload.py ⭐ un script de python3 para explotar CVE-2009-2265. el exploit - CVE-2009-2265 ❗ el script explota una vulnerabilidad encontrada en FCKeditor 2.6.4.1 que fue implementada en adobe coldfusion 8.0.1: https://vulners.com/cve/CVE-2009-2265 el script permite al usuario enviar un archivo...

CVE-2021-1675

Explicación de la vulnerabilidad El Administrador de colas de impresión Printer Spooler es un servicio de Windows que gestiona las colas de impresión. Recibe trabajos enviados por el usuario, los convierte a un formato que la impresora entiende y los envía cuando la impresora está disponible. Se...

CVE-2020-29254

CVE-2020-29254 TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. ========================== Cross-Side-Request-Forgery CSRF: TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. This could allow an unauthenticated, remote attacker to conduct a...

CVE-2026-27542-CVE-2026-27540-

🔴 Resumen de vulnerabilidades CVE-2026-27542 — Escalada de privilegios no autenticada Descripción: El complemento WooCommerce Wholesale Lead Capture para WordPress es vulnerable a la escalada de privilegios no autenticada en todas las versiones afectadas conocidas. La vulnerabilidad existe dentro...

jboss-autopwn-1

jboss-autopwn 在2010年BlackHat Europe上展示的JBoss Autopwn——该版本整合了CVE-2010-0738，即Minded Security发现的JBoss认证绕过VERB操控漏洞。 C. Papathanasiou 2010 介绍 该JBoss脚本在目标JBoss AS服务器上部署一个JSP shell。部署后，脚本利用其上传和执行命令的功能提供一个交互式会话。 功能包括： 多平台支持——已在Windows、Linux和Mac目标上测试 支持绑定shell和反向连接shell Windows目标的Meterpreter shell和VNC支持 安...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : Cross-Site Scripting vía /client/manage/ourphpout.php Productos afectados por CVE-2023-30212 : Vendedor| Producto| Versión ---|---|---...

CVE-2021-4034-POC

CRÉDITOS AUTOR DE LA VULNERABILIDAD: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Referencia https://github.com/arthepsy/CVE-2021-4034/blob/main/cve-2021-4034-poc.c...

CVE-2026-94031

A command injection vulnerability exists in the nexus_reauth MCP tool of the nexus-mcp project (0-Gaurav-0/nexus-mcp). The child_process.exec function in src/auth/browser.ts fails to properly sanitize the url argument, allowing a remote attacker with low privileges to inject arbitrary commands. T...

CVE-2026-94031 0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

EUVD-2026-83747

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

CVE-2026-94031 0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection

A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function childprocess.exec of the file src/auth/browser.ts of the component nexusreauth MCP tool. The manipulation of the argument url results in command injection. The...

CVE-2024-34102

CVE-2024-34102 Uso root@kitploit: python3 CVE-2024-34102.py -h optional arguments: -h, --help muestra este mensaje de ayuda y sale -u URL, --url URL URL objetivo -ip IP, --ip IP Tu dirección IP -p PORT, --port PORT Puerto para el servidor HTTP -f FILE, --file FILE Ruta al archivo que se incluirá ...

cve-mcp-server

cve-mcp-server Realtime CVE intelligence over the Model Conte...

ProFTPD_CVE-2015-3306

m4ud Exploit RCE de ProFTPD 1.3.5 CVE : 2015-3306! root@kitploit: ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET,...

CVE-2026-94030

CVE-2026-94030 is an integer overflow in the decode_bmp_pixel_data function of BMPLoader.cpp within SerenityOS's LibGfx component. Manipulating the height argument triggers the overflow, and the attack is remote with high complexity . A minimal 55-byte PoC was produced via the standard image-deco...

CVE-2026-94030 SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...

CVE-2026-94030 SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow

A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decodebmppixeldata of the file Userland/Libraries/LibGfx/ImageFormats/BMPLoader.cpp of the component LibGfx. The manipulation of the argument...