Paperclip - Remote Code Execution

Paperclip 2026.416.0 contains a remote code execution caused by a chain of six unauthenticated API calls in authenticated mode with default configuration, letting unauthenticated attackers execute arbitrary code remotely, exploit requires network access to the target. id: CVE-2026-41679 info: nam...

porterminal

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

TriforceAFL

新消息：如果你想尝试使用 TriforceAFL 和 TLSF，Richard Johnson 创建了一个 Dockerfile，可以同时安装两者（甚至为你构建一个 Linux 内核）。可在此处获取 https://hub.docker.com/r/moflow/afl-triforce/tags/。 另一项新消息：afl-tmin 现在支持 forkserver 了！ https://github.com/nccgroup/TriforceAFL Jesse Hertz [email protected] Tim Newsham [email protected] ...

Ivanti EPMM < 12.8.0.0 - Remote Code Execution

Ivanti Endpoint Manager Mobile contains a code injection vulnerability allowing unauthenticated attackers to execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-1340 info: name: Ivanti EPMM 12.8.0.0 - Remote Code Execution author: 0xAkoko severity: critical...

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx リモートコード実行の脆弱性 脆弱性の説明と影響 CVE-2019–11043はリモートコード実行（RCE）の脆弱性です。これは、Nginx Webサーバーとよく一緒に使用されるFastCGIプロセスマネージャであるPHP-FPMに影響を与えます。この欠陥は、Nginx接続を介したリクエスト処理時におけるPHP-FPMのバッファ制限の不適切な解析に起因します。攻撃者は、操作可能なHTTPリクエストを送信することでこれを悪用し、影響を受けるサーバー上でコードを実行できます。...

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE 任意文件读取 - 完全系统沦陷。尚未测试...本周将进行测试。...

CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...

CVE-2026-76709

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of HPE Networking Analytics and Location Engine (ALE) . An authenticated remote attacker can exploit this flaw to gain unauthorized access to the file system with root privileges , potentially leading to a full system compromise . No...

CVE-2026-76709 Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

CVE-2026-76709

A vulnerability exists in the internal administrative component of the HPE Networking Analytics and Location Engine (ALE) . This flaw allows an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges . Successful exploitation could lead to a f...

EUVD-2026-84668

A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...

EUVD-2026-84669

A vulnerability exists in the internal administrative component of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to gain unauthorized write access to the file system with elevated privileges, potentially resulting i...

CVE-2026-76708 Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)

A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...

CVE-2026-76708

A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) because the application and its underlying operating system utilize default, hard-coded credentials for multiple administrative and system accounts. An unauthenticated remote attacker can exploit this by logging in w...

CVE-2025-42957-SAP-S-4HANA-Under-Siege

CVE-2025-42957-SAP-S-4HANA-Under-Siege 1 – 何が起きたのか？ 2025年8月、SAPの旗艦ERPプラットフォーム S/4HANA が、RFC対応ファンクションモジュールの1つに脆弱性を露呈していることが判明しました。低特権アクセスのみを持つ攻撃者は、そのモジュールに任意のABAPコードを注入し、通常の認可チェックをバイパスしてシステム全体を制御できるようになります。 この欠陥は理論上の好奇心の対象ではありません。 SecurityBridge Threat Research Labs...

CVE-2025-47812

CVE-2025-47812 不適切な入力検証により、リモートコード実行からシステム全体の侵害に至る 📘 はじめに: RCE SecurityのJulien Ahrens氏が、WingFTPに影響を与える重大なセキュリティ脆弱性を発見しました。CVE-2025-47812として追跡されるこの脆弱性のCVSSスコアは10です。この脆弱性が悪用されると、リモートの未認証の攻撃者が任意のコードを実行し、システム全体が侵害される可能性があります。 Wing FTP...

CVE-2026-76708: Use of Hard-coded Credentials

A vulnerability exists in the Analytics and Location Engine ALE where the application and underlying operating system use default, hard-coded credentials for several administrative and system accounts. An unauthenticated remote attacker could exploit this vulnerability by attempting to log in usi...

CVE-2025-26264

CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb バージョン 6.1.2.0 以下には、Notification Settings 機能にリモートコード実行 RCE の脆弱性が存在します。ASWeb で「システム設定」権限を持つ認証済み攻撃者は、この欠陥を悪用してサーバー上で任意のコマンドを実行し、システム全体を完全に侵害する可能性があります。 要件 攻撃を成功させるには、攻撃者には以下が必要です: バージョン 6.1.2.0 以下の GV-ASManager Web アプリケーションへのネットワークアクセス; 通知設定...

CVE-2025-53770

CVE-2025-53770 これは、CVE-2025-53770 の未認証RCE脆弱性に対する複数サイトスキャナーです。 他のスキャナー/PoC: https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 Sharepoint RCE 影響: 未認証の攻撃者がリモートコード実行を実現し、システム全体を侵害する可能性があります。 深刻度: 重大 使用例 python CVE-2025-53770-Scanner.py...