EUVD-2026-65092

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

cve-2023-30253

CVE-2023-30253 विवरण Dolibarr 17.0.1 से पहले के संस्करण में, एक प्रमाणित उपयोगकर्ता अपरकेस हेरफेर के माध्यम से दूरस्थ कोड निष्पादन की अनुमति देता है: इंजेक्ट किए गए डेटा में ?PHP को ?php के बजाय उपयोग करना। दस्तावेज़ीकरण CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh सेटअप root@kitploit: git...

CVE-2023-27350

CVE-2023-27350 POC per CVE-2023-27350 che colpisce PaperCut MF/NG Versioni Affette 'PaperCut MF o NG versione 8.0 o successive escluse le versioni corrette su tutte le piattaforme OS.' Riepilogo Questo POC utilizza una vulnerabilità di bypass dell'autenticazione concatenata con l'abuso della...

GHSA-XM98-3VCF-FPH7 mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2024-7854

CVE-2024-7854 Woo Inquiry = 0.1 - SQL Injection non autenticata Descrizione: Il plugin Woo Inquiry per WordPress è vulnerabile a SQL Injection in tutte le versioni fino alla 0.1 inclusa a causa di un insufficiente escape sul parametro fornito dall'utente 'dbid' e della mancanza di una preparazion...

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorizzazione mancante per aggiornamento arbitrario delle opzioni Subscriber+ Descrizione: Il plugin InstaWP Connect – 1-click WP Staging & Migration per WordPress è vulnerabile a modifiche non autorizzate dei dati a causa di un controllo di capacità...

OPENSUSE-SU-2026:21635-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images bsc1270004. - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided bsc1272575. - CVE-2026-62363: heap buffer overwrite in fx...

Popcorn-TJNULL-OSCP-

HackTheBox: Write-up di Popcorn Data: 05 giugno 2026 Difficoltà: Facile Piattaforma: HackTheBox Tecniche principali: Enumerazione di porte e servizi, Fuzzing delle directory Gobuster, Evasione del caricamento file, Manipolazione delle richieste HTTP Burp Suite, Esecuzione remota di codice RCE,...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

CVE-2021-33026

CVE-2021-33026 Pickle सीरियलाइज़ेशन रिमोट कोड एक्ज़ीक्यूशन - मेमकैश्ड पॉइज़निंग PoC एक्सप्लॉइट CVE-2021-3306 क्या है? "Flask के लिए Flask-Caching एक्सटेंशन 1.10.1 तक सीरियलाइज़ेशन के लिए Pickle का उपयोग करता है, जिससे रिमोट कोड एक्ज़ीक्यूशन या लोकल प्रिविलेज एस्केलेशन हो सकता है। यदि कोई हमलावर क...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update

An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461...

CVE-2023-4568

बैज लाइसेंस MIT स्थापना 1. Python3 और pip स्थापित करें निर्देश यहाँ यदि आप यह नहीं समझ पाते हैं, तो आपको वास्तव में इसका उपयोग नहीं करना चाहिए pip के माध्यम से स्थापित करें root@kitploit: pip install CVE-2023-4568 जाँच करने के लिए नीचे दिए गए कमांड को चलाएँ CVE-2023-4568 -h कॉन्फ़िगरेशन 2. हमने...