EUVD-2026-65520

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized userid into self.userpath. A caller supplying ../ or path separators can escape the memory directory and write JSON data to arbitrary process-writable locations. The fix sanitize...

CVE-2026-55527 PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized userid into self.userpath. A caller supplying ../ or path separators can escape the memory directory and write JSON data to arbitrary process-writable locations. The fix sanitize...

CVE-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

CVE-2022-36537

CVE-2022-36537 Zusammenfassung R1Soft Server Backup Manager verwendet das ZK-Framework als Hauptframework. Dessen Sicherheit erfordert, dass alle Web3-Projektbeteiligten den Sicherheitslücken verschiedener Web3-Infrastrukturen mehr Aufmerksamkeit schenken und diese rechtzeitig patchen, um...

CVE-2022-44268

CVE-2022-44268 Dieses Repository enthält einen Proof of Concept POC für eine Sicherheitslücke in ImageMagick v. 7.1.0-49, einer weit verbreiteten Open-Source-Bibliothek zur Bildbearbeitung. Die Sicherheitslücke ermöglicht es einem Angreifer, den Inhalt einer beliebigen Datei in ein skaliertes Bil...

CVE-2026-55530

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58 , the ast_grep_rewrite tool lacks the @require_approval decorator enforced on sibling mutation tools. With dry_run=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the ...

EUVD-2026-65501

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...

CVE-2026-55530 PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...

CVE-2025-48384

CVE-2025-48384 Ceci est un fichier readme...

httpd: mod_http2: Apache HTTP Server mod_http2: Use After Free vulnerability allows arbitrary code execution or denial of service.

A flaw was found in the Apache HTTP Server's modhttp2 module. This vulnerability, known as a Use After Free, occurs when the server's file handles are exhausted. An attacker could potentially exploit this to cause a denial of service or, in some cases, execute arbitrary code, leading to system...

CVE-2022-0847-DirtyPipe-

CVE-2022-0847-DirtyPipe-Exploits Uma coleção de exploits e documentação para testadores de penetração e red teamers que pode ser usada para auxiliar na exploração da vulnerabilidade Linux Dirty Pipe. Sobre a Vulnerabilidade Dirty Pipe CVE-2022-0847 é uma vulnerabilidade de escalonamento de...

CVE-2020-5902

CVE-2020-5902 Script Python pour exploiter la vulnérabilité F5 Big-IP CVE-2020-5902 Exemples Exploitation de la lecture de fichier local : python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Exploitation RCE : python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

CVE-2022-0848

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Ändere den Host in der bash-Datei und führe sie aus...

CVE-2026-16286

CVE-2026-16286 is an unrestricted file upload vulnerability in TRtek Software Repository Management , allowing an unauthenticated attacker to upload a web shell to a web server. The flaw stems from insufficient validation of uploaded file types. Affected versions are those before commit 2fb4acee ...

EUVD-2026-65495

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2026-16286 File Upload in TRTEK Software's Software Repository Management

Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management allows Upload a Web Shell to a Web Server. This issue affects Software Repository Management: before 2fb4acee...

CVE-2023-0386_POC

Squadra CVE-MD Questo repository fornisce una prova di concetto per CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Membri del team: Bǎnicǎ Dragoș-Marius e Borsos Matheas-Roland Ecco il video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalation dei privilegi local...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Exploit di Caricamento File Arbitrario CVE-2024-56264 Panoramica Questo repository contiene un exploit per CVE-2024-56264 , una vulnerabilità di Caricamento File Arbitrario presente nel plugin WordPress ACF City Selector versioni = 1.14.0. Questa...

cve-2024-21626

CVE-2024-21626 Panoramica Questo repository contiene esempi di codice per un'app vulnerabile a CVE-2024-21626 e un gadget eBPF per rilevare i tentativi di sfruttamento. Questo repository è stato creato come parte di questo post del blog. Il programma gadget usato per rilevare questa vulnerabilità...

CVE-2021-21123-PoC-Google-Chrome

📝 Beschreibung Google Chrome - File System Access API - von Maciej Pulikowski gemeldete Schwachstellen Gesamte Bug-Bounty-Belohnung: $5.000 Dies ist ein Proof of Concept für: Google SecuritySeverity CVE HOCH CVE-2021-21123 MITTEL CVE-2021-21129 MITTEL CVE-2021-21130 MITTEL CVE-2021-21131 MITTEL...