cve-2026-39987

cve-2026-39987 Installazione • Uso • Esempi Sto solo provando Go :D Comunque: CVE-2026-39987 PoC: esecuzione remota di codice pre-autenticazione in Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: T...

CVE-2026-11961

CVE-2026-11961 Strumento per exploit di massa per CVE-2026-11961 che colpisce il plugin WordPress User Registration & Membership. Caratteristiche Rilevamento della versione del plugin Supporto per singolo target Elaborazione batch di target Supporto multi-thread Credenziali casuali o personalizza...

CVE-2026-44613

CVE-2026-44613 Dona Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambienti di...

PowSyBl Core has Command Injection in LocalCommandExecutor-s

Impact Description Both AbstractLocalCommandExecutor OS-dependent implementations are subject to CWE-78 OS Command Injection, with a secondary CWE-88 Argument Injection concern via environment variables. The local command executor build command strings via concatenation and executes them through...

GHSA-JQVF-J3WW-R8C7 PowSyBl Core has Command Injection in LocalCommandExecutor-s

Impact Description Both AbstractLocalCommandExecutor OS-dependent implementations are subject to CWE-78 OS Command Injection, with a secondary CWE-88 Argument Injection concern via environment variables. The local command executor build command strings via concatenation and executes them through...

CVE-2026-28956

CVE-2026-28956 Dona Supporta la manutenzione di questo progetto con PayPal o scansionando il codice QR qui sotto. ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Laboratori isolati Ambienti di penetration testin...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-55673

PowSyBl (Power System Blocks), a framework for building power system software, is affected by a command injection vulnerability prior to version 7.2.2. The UnixLocalCommandExecutor and WindowsLocalCommandExecutor components concatenate attacker-controlled arguments and environment variables into ...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

EUVD-2026-67863

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-69263

CVE 2026-69263 Cosa CVE 2026-69263 è un bypass della patch che ad agosto 2025 aveva corretto la vecchia vulnerabilità RCE. La patch ha introdotto una denylist che bloccava l'installazione di pacchetti arbitrari. Come Poiché npm legge la configurazione dalle variabili d'ambiente, impostare la...

CVE-2026-44402

CVE-2026-44402 Esecuzione Remota Completa di Comandi senza autenticazione in Voltronic Power SNMP Web Pro 1.1 Contenuto Vendor interessato: https://voltronicpower.com/ Prodotto interessato: SNMP Web pro 1.1 SNMP Web Pro 1.1 contiene una vulnerabilità di esecuzione remota di codice non autenticata...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC CVE-2026-43499 kernel Qualcomm 4.19 Escalata locale di privilegi che sfrutta CVE-2026-43499 — un bug in rtmutex removewaiter che lascia un struct rtmutexwaiter pendente sullo stack del kernel del waiter kernel/locking/rtmutex.c, CWE-416 use-after-free. Adattato da...

EUVD-2026-66417

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...

EUVD-2026-67859

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...