CVE-2024-52301

CVE-2024-52301 POC This vulnerability is based on the CVE-2024-50340 vulnerability Requirements The registerargcargv option must be enabled in the PHP configuration file php.ini. This setting loads command-line arguments and query params into $SERVER'argv'...

CVE-2026-1107

CVE-2026-1107 Nuclei Template Nuclei template for detecting CVE-2026-1107 in EyouCMS. The vulnerability allows unauthenticated attackers to perform Path Traversal/Arbitrary File Read via the checkuserinfo function in Diyajax.php. Vulnerability Details CVE ID: CVE-2026-1107 Target: EyouCMS 1.7.1...

zerologon

zerologon script zerologon para explotar CVE-2020-1472 CVSS 10/10 Código de explotación basado en https://www.secura.com/blog/zero-logon y https://github.com/SecuraBV/CVE-2020-1472. Investigación original y escáner por Secura, modificaciones por RiskSense Inc. https://github.com/risksense/zerolog...

mini-diarium v0.7.3

Mini Diarium A local-only journal with serious encryption. Free, open source, and never touches the internet. mini-diarium.com · Download · Documentation · Features · Philosophy · Benchmarks ☕ Support the Project Mini Diarium is free, open source, and will always be. If you find it useful and wan...

cve-2025-59287-exploit-poc

CVE-2025-59287 Proof-of-Concept Exploit Vulnerability Overview CVE-2025-59287 is a critical Remote Code Execution RCE vulnerability in Microsoft Windows Server Update Services WSUS. The vulnerability is caused by unsafe deserialization of AuthorizationCookie data through BinaryFormatter in the...

CVE-2021-3030

Cute Editor for ASP.NET 6.4 (vendor: CuteSoft) is vulnerable to reflected cross-site scripting (CWE-79) caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. The unsanitized value is reflected into an HTML attribute context, allowing a remote, unauthenticated attacker...

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-el-3_0-api / etc (SUSE-SU-2026:4203-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4203-1 advisory. - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.3 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035523 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 40035522 CVE-2026-80844 - tcp: clear sockops cb flags before force-closing a child socket Sechang Lim...

SideCopy Threat Intel: MSHTA-driven Execution and RAT Deployment

SideCopy Threat Intel: MSHTA-driven Execution and RAT Deployment By Boggavarapu R S S Srinivas Gupta and Ravishankar N C · September 17, 2026 Introduction The modern cyber warfare landscape has evolved significantly as threat actors pivot toward simple yet highly effective and evasive malware...

EulerOS 2.0 SP15 : qemu (EulerOS-SA-2026-3795)

According to the versions of the qemu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before...

CVE-2021-3030

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...

VulnCheck KEV: CVE-2026-40242

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...

RHEL 9 : kernel (RHSA-2026:68570)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68570 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel t7xx WWAN driver...

EUVD-2021-34881

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...

Rclone 1.70.x < 1.75.1 RC Per-Server Auth-Proxy Bypass (CVE-2026-88044)

The version of Rclone installed on the remote host is 1.70.x prior to 1.75.1. It is, therefore, affected by an authentication bypass vulnerability: - The serve/start remote control method accepts protocol options in a per-server proxyOpt object, but the FTP and S3 server constructors decide wheth...

EulerOS 2.0 SP15 : qemu (EulerOS-SA-2026-3820)

According to the versions of the qemu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: coredns (UTSA-2026-109796)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109796 advisory. CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. F...

Load UCS Data

Load UCS Data %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid346750; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/09/17"; scriptnameenglish:"Load UCS Data"; scriptsetattributeattribute:"synopsis", value:"Load UCS Data";...

CVE-2021-3030

Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpickermore.aspx. A remote, unauthenticated attacker can craft a URL that, once opened by a victim in a browser session authenticated to a site running the...

Security update for gh (important)

openSUSE security update: security update for gh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21861-1 Rating: important References: bsc1278604 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-78662 CVSS scores: CVE-2026-56854 SUSE : 8.1...