CVE-2026-55530

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58 , the ast_grep_rewrite tool lacks the @require_approval decorator enforced on sibling mutation tools. With dry_run=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the ...

EUVD-2026-65501

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...

CVE-2026-55530 PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...

CVE-2025-48384

CVE-2025-48384 Ceci est un fichier readme...

httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.

A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...

CVE-2022-0847-DirtyPipe-

CVE-2022-0847-DirtyPipe-Exploits Uma coleção de exploits e documentação para testadores de penetração e red teamers que pode ser usada para auxiliar na exploração da vulnerabilidade Linux Dirty Pipe. Sobre a Vulnerabilidade Dirty Pipe CVE-2022-0847 é uma vulnerabilidade de escalonamento de...

CVE-2020-5902

CVE-2020-5902 Script Python pour exploiter la vulnérabilité F5 Big-IP CVE-2020-5902 Exemples Exploitation de la lecture de fichier local : python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploitation RCE : python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 PoC di Lettura File Arbitrario in ImageMagick PoC per CVE-2022-44268 Lettura File Arbitrario in ImageMagick - Generatore di Payload Questo progetto è creato solo per scopi educativi e non può essere utilizzato per violazioni di legge o guadagni personali. L'autore di questo progett...

CVE-2022-0848

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Ändere den Host in der bash-Datei und führe sie aus...

CVE-2026-16286

CVE-2026-16286 is an unrestricted file upload vulnerability in TRtek Software Repository Management , allowing an unauthenticated attacker to upload a web shell to a web server. The flaw stems from insufficient validation of uploaded file types. Affected versions are those before commit 2fb4acee ...

EUVD-2026-65495

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2026-16286 File Upload in TRTEK Software's Software Repository Management

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2023-0386_POC

Squadra CVE-MD Questo repository fornisce una prova di concetto per CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Membri del team: Bǎnicǎ Dragoș-Marius e Borsos Matheas-Roland Ecco il video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalation dei privilegi local...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Exploit di Caricamento File Arbitrario CVE-2024-56264 Panoramica Questo repository contiene un exploit per CVE-2024-56264 , una vulnerabilità di Caricamento File Arbitrario presente nel plugin WordPress ACF City Selector versioni = 1.14.0. Questa...

cve-2024-21626

CVE-2024-21626 Panoramica Questo repository contiene esempi di codice per un'app vulnerabile a CVE-2024-21626 e un gadget eBPF per rilevare i tentativi di sfruttamento. Questo repository è stato creato come parte di questo post del blog. Il programma gadget usato per rilevare questa vulnerabilità...

CVE-2021-21123-PoC-Google-Chrome

📝 Beschreibung Google Chrome - File System Access API - von Maciej Pulikowski gemeldete Schwachstellen Gesamte Bug-Bounty-Belohnung: $5.000 Dies ist ein Proof of Concept für: Google SecuritySeverity CVE HOCH CVE-2021-21123 MITTEL CVE-2021-21129 MITTEL CVE-2021-21130 MITTEL CVE-2021-21131 MITTEL...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2023-45878

CVE-2023-45878 Ho scritto questo script basandomi sul lavoro di https://herolab.usd.de/security-advisories/usd-2023-0025/ . L'exploit sfrutta una vulnerabilità di scrittura arbitraria di file in Gibbon LMS 25.0.1. Questa PoC caricherà un semplice script php cmd, e poi lo userà per caricare una...

CVE-2022-1329

CVE-2022-1329 Das Elementor Website Builder Plugin für WordPress ist anfällig für die unbefugte Ausführung mehrerer AJAX-Aktionen aufgrund einer fehlenden Berechtigungsprüfung in der Datei /core/app/modules/onboarding/module.php, die es Angreifern ermöglicht, Websitedaten zu ändern und bösartige...