CVE-2026-0075

CVE-2026-0075 ContactsProvider-Forschungs-PoC Ein Android-Forschungsprototyp für kontrollierte Labore zur Bewertung des mit CVE-2026-0075 in ContactsProvider2 verbundenen beobachtbaren Verhaltens. Übersicht CVE-2026-0075 ist ein Problem der lokalen Rechteausweitung Elevation of Privilege in...

PowSyBl Core has Command Injection in LocalCommandExecutor-s

Impact Description Both AbstractLocalCommandExecutor OS-dependent implementations are subject to CWE-78 OS Command Injection, with a secondary CWE-88 Argument Injection concern via environment variables. The local command executor build command strings via concatenation and executes them through...

GHSA-JQVF-J3WW-R8C7 PowSyBl Core has Command Injection in LocalCommandExecutor-s

Impact Description Both AbstractLocalCommandExecutor OS-dependent implementations are subject to CWE-78 OS Command Injection, with a secondary CWE-88 Argument Injection concern via environment variables. The local command executor build command strings via concatenation and executes them through...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-55673

PowSyBl (Power System Blocks), a framework for building power system software, is affected by a command injection vulnerability prior to version 7.2.2. The UnixLocalCommandExecutor and WindowsLocalCommandExecutor components concatenate attacker-controlled arguments and environment variables into ...

EUVD-2026-67863

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to 7.2.2, UnixLocalCommandExecutor and WindowsLocalCommandExecutor concatenate command arguments and environment variables into strings interpreted through bash -c or cmd /c without sufficient escaping...

CVE-2020-10199

CVE-2020-10199 Prima, durante un PT penetration test, mi sono imbattuto in un ambiente target con un Nexus Repository Manager installato; dopo alcuni intoppi sono comunque riuscito a ottenere una shell. Ho deciso di documentare l'accaduto, così in futuro sarà più semplice rivedere i passaggi...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Analisi: CVE-2021-44228 Log4Shell / Log4j Per questo laboratorio, l'obiettivo era analizzare un'altra vulnerabilità reale e ben nota, Log4Shell, una delle vulnerabilità più sfruttate degli ultimi anni a causa della diffusione della libreria interessata nel software aziendale. Passo 1: Aprire la C...

CVE-2025-5781

Exploit FreePBX CVE-2025-57819 Descrizione Questo script sfrutta una vulnerabilità nelle versioni di FreePBX precedenti alla 16.0.26.0 CVE-2025-57819, consentendo a un attaccante remoto di eseguire codice PHP arbitrario tramite una falla di SQL injection nell'endpoint API AJAX. L'exploit crea sia...

CVE-2023-48084-Revised

CVE-2023-48084 — PoC atualizado Repositório: MettHK/CVE-2023-48084-Revised Versão atualizada de Hamibubu/CVE-2023-48084 com multithreading, extração por busca binária e flags de CLI para seleção de banco de dados / tabela / coluna. Não é o repositório original. Este é um PoC derivado/melhorado. O...

EUVD-2026-66244

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...

WP2Shell

WP2Shell - Exploit RCE pre-autenticazione per WordPress CVE-2026-63030 + CVE-2026-60137 Versione: 4.0.0 Autore: G0D150NE 📌 Panoramica WP2Shell è uno strumento di exploit a catena completa per l'esecuzione remota di codice pre-autenticazione su WordPress. Combina due vulnerabilità critiche:...

CVE-2025-2945

CVE-2025-2945 - Exploit RCE autenticato in pgAdmin4 Autore: G0D150NE Versione: 2.0.0 CVE: CVE-2025-2945 Gravità: Critica CVSS 9.9 📌 Descrizione Exploit per la vulnerabilità di Remote Code Execution RCE in pgAdmin4 che interessa le versioni dalla 8.10 alla 9.1. La vulnerabilità è presente...

HTB-TwoMillion-machine

Writeup do Hack The Box - TwoMillion Visão Geral Este repositório contém meu passo a passo para a máquina Hack The Box - TwoMillion. O objetivo deste writeup é documentar minha metodologia, explicar o processo de enumeração e demonstrar a cadeia de exploração que levou ao acesso de User e Root...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Disclaimer: Questa proof-of-concept è fornita esclusivamente per ricerca sulla sicurezza autorizzata, scopi educativi e ambienti di laboratorio controllati es. HTB, CTF o test di penetrazione interni con consenso scritto esplicito. L'uso non autorizzato contro qualsiasi sistema...

CVE-2025-68400

CVE-2025-68400: ChurchCRM vulnerabile a SQL Injection cieca basata sul tempo in ConfirmReportEmail.php Panoramica...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...