CVE-2026-55530 PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...

CVE-2025-48384

CVE-2025-48384 Ceci est un fichier readme...

CVE-2022-0847-DirtyPipe-

CVE-2022-0847-DirtyPipe-Exploits Uma coleção de exploits e documentação para testadores de penetração e red teamers que pode ser usada para auxiliar na exploração da vulnerabilidade Linux Dirty Pipe. Sobre a Vulnerabilidade Dirty Pipe CVE-2022-0847 é uma vulnerabilidade de escalonamento de...

CVE-2020-5902

CVE-2020-5902 Script Python pour exploiter la vulnérabilité F5 Big-IP CVE-2020-5902 Exemples Exploitation de la lecture de fichier local : python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploitation RCE : python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 PoC di Lettura File Arbitrario in ImageMagick PoC per CVE-2022-44268 Lettura File Arbitrario in ImageMagick - Generatore di Payload Questo progetto è creato solo per scopi educativi e non può essere utilizzato per violazioni di legge o guadagni personali. L'autore di questo progett...

CVE-2022-0848

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Ändere den Host in der bash-Datei und führe sie aus...

CVE-2026-16286

CVE-2026-16286 is an unrestricted file upload vulnerability in TRtek Software Repository Management , allowing an unauthenticated attacker to upload a web shell to a web server. The flaw stems from insufficient validation of uploaded file types. Affected versions are those before commit 2fb4acee ...

EUVD-2026-65495

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2026-16286 File Upload in TRTEK Software's Software Repository Management

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2023-0386_POC

Squadra CVE-MD Questo repository fornisce una prova di concetto per CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Membri del team: Bǎnicǎ Dragoș-Marius e Borsos Matheas-Roland Ecco il video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalation dei privilegi local...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Exploit di Caricamento File Arbitrario CVE-2024-56264 Panoramica Questo repository contiene un exploit per CVE-2024-56264 , una vulnerabilità di Caricamento File Arbitrario presente nel plugin WordPress ACF City Selector versioni = 1.14.0. Questa...

cve-2024-21626

CVE-2024-21626 Panoramica Questo repository contiene esempi di codice per un'app vulnerabile a CVE-2024-21626 e un gadget eBPF per rilevare i tentativi di sfruttamento. Questo repository è stato creato come parte di questo post del blog. Il programma gadget usato per rilevare questa vulnerabilità...

CVE-2021-21123-PoC-Google-Chrome

📝 Beschreibung Google Chrome - File System Access API - von Maciej Pulikowski gemeldete Schwachstellen Gesamte Bug-Bounty-Belohnung: $5.000 Dies ist ein Proof of Concept für: Google SecuritySeverity CVE HOCH CVE-2021-21123 MITTEL CVE-2021-21129 MITTEL CVE-2021-21130 MITTEL CVE-2021-21131 MITTEL...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2023-45878

CVE-2023-45878 Ho scritto questo script basandomi sul lavoro di https://herolab.usd.de/security-advisories/usd-2023-0025/ . L'exploit sfrutta una vulnerabilità di scrittura arbitraria di file in Gibbon LMS 25.0.1. Questa PoC caricherà un semplice script php cmd, e poi lo userà per caricare una...

CVE-2022-1329

CVE-2022-1329 Das Elementor Website Builder Plugin für WordPress ist anfällig für die unbefugte Ausführung mehrerer AJAX-Aktionen aufgrund einer fehlenden Berechtigungsprüfung in der Datei /core/app/modules/onboarding/module.php, die es Angreifern ermöglicht, Websitedaten zu ändern und bösartige...

CVE-2024-3094-XZ-Backdoor-Detector

विवरण xz के अपस्ट्रीम टारबॉल में दुर्भावनापूर्ण कोड पाया गया, जो संस्करण 5.6.0 से शुरू हुआ। जटिल अस्पष्टीकरणों की एक श्रृंखला के माध्यम से, liblzma बिल्ड प्रक्रिया स्रोत कोड में मौजूद एक प्रच्छन्न परीक्षण फ़ाइल से एक पूर्व-निर्मित ऑब्जेक्ट फ़ाइल निकालती है, जिसका उपयोग liblzma कोड में विशिष्ट...

CVE-2024-51324

CVE-2024-51324 — BYOVD: BdApiUtil64.sys · بحث رسالة الماجستير -orange إحضار برنامج تشغيل ضعيف خاص بك BYOVD — مضاد الفيروسات بايدوBdApiUtil64.sys ثلاث بدائيات نواة غير موثقة: إنهاء العمليات، حذف الملفات العشوائي، وحذف الملفات قيد الاستخدام مع تجاوز SectionObjectPointer المتأثر: مضاد الفيروسات بايد...

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit e writeup. Dettagli CVE-2022-29464 è una grave vulnerabilità in WSO2. La vulnerabilità è un caricamento arbitrario di file non autorizzato e senza restrizioni che consente a utenti non autorizzati di caricare file JSP dannosi sui server WSO2 e ottenere l'esecuzione...