Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2111)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2111 advisory. FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicio...

CVE-2026-51974

An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...

PT-2026-84464

Name of the Vulnerable Software and Affected Versions Composer versions 1.0 through 2.2.29 Composer versions 2.10.0 through 2.10.2 Description Composer, a dependency manager for PHP, fails to validate the source.url when source.type is set to perforce. A malicious package from a custom repository...

CVE-2026-17543-PHP-Exposure-Validator

Валидатор подверженности уязвимости PHP CVE-2026-17543 Безопасный сетевой валидатор для проверки потенциальной подверженности уязвимости PHP CVE-2026-17543. Этот проект проверяет, использует ли удалённый веб-сервер версию PHP, затронутую уязвимостью CVE-2026-17543, и при необходимости может...

CVE-2026-71300

CVE-2026-71300 — инъекция заголовка диспетчеризации camel-atmosphere-websocket Рабочий proof-of-concept репродуктор уязвимости Apache Camel, в которой производитель camel-atmosphere-websocket выбирает получателей WebSocket из заголовков Exchange websocket., имена которых находятся вне пространств...

CVE-2026-82222

CVE-2026-82222 — GiveWP Автор: Rx019 CVSS: 10.0 Critical Тип: Неаутентифицированная PHP Object Injection → Remote Code Execution Плагин: GiveWP give — Donation Plugin and Fundraising Platform Затронутые версии: Исправлено в: 4.16.8 Описание GiveWP сохраняет lastname донора в PHP-сессии без...

HavocPwn

Havoc-PWN Authenticated Эта SSRF-RCE цепочка была вдохновлена SSRF POC от chebuya для CVE-2024-41570 и Havoc Auth RCE от IncludeSecurity — оба эксплойта потрясающие и отлично проработаны, пожалуйста, оцените труд этих авторов! chebuya hyperreality Как это работает? Уязвимость SSRF работает за счё...

CVE-2026-83524

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

CVE-2026-82971

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-83524 RedPort Optimizer wXa-223 System Clock datetime.php exec command injection

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...

CVE-2026-83524

A command injection vulnerability affects the System Clock component of RedPort Optimizer wXa-203 , wXa-213 , and wXa-223 (up to version 20260704). The flaw resides in the exec function of /xgatev1/system/datetime.php, allowing a remote attacker with low privileges to inject commands without user...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Удаленное выполнение кода PoC Go proof of concept для CVE-2025-59528 , нацеленный на версии Flowise...

CVE-2026-82922

A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flowupdatecart of the file /flow.php?step=updatecart. The manipulation of the argument recid leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

CVE-2026-77353

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, Wallos allows authenticated users to inject arbitrary iCalendar properties and events into their exported .ics feed by embedding raw CRLF sequences in subscription names or notes. Because the input...

CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection

A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-82971

A command injection vulnerability in QVidium Opera11 3.3.2a26-Ax4x-opera11 affects the CGI script /cgi-bin/net_tr.cgi , where manipulation of the ipaddr argument allows remote, unauthenticated attackers to execute arbitrary commands. The vulnerability is rated CVSS 10.0 (Critical) with low attack...

CVE-2026-78329

CVE-2026-78329 — стратегия фильтрации заголовков camel-undertow не применяется инъекция websocket. Готовый к запуску репроducer proof-of-concept для уязвимости Apache Camel, в которой UndertowEndpoint по умолчанию использовал базовую HttpHeaderFilterStrategy в качестве своей headerFilterStrategy ...

CVE-2026-22015-Serverless-Function-Environment-Variable-Injection-via-Event

CVE-2026-22015 – Внедрение переменных окружения в бессерверную функцию через событие Программный код имитация Python Lambda root@kitploit: lambdaenvinject.py - Vulnerable function that reads env from event import os, json def handlerevent, context: The event contains environment variable override...

wp2shell-rce

WP2Shell RCE Утилита для оценки и сканирования, предназначенная для обнаружения подверженности цепочке эксплойтов WP2Shell в установках WordPress Core — как на отдельных конечных точках, так и на больших списках целей. ⚠️ Дисклеймер Сканируйте только те системы, которые принадлежат вам или которые...

CVE-2026-82922 ShopEx ECShop flow.php flow_update_cart sql injection

A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flowupdatecart of the file /flow.php?step=updatecart. The manipulation of the argument recid leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...