CVE-2026-82661

A flaw was found in Nodemailer, an email sending library. This vulnerability allows a remote attacker with control over specific list comment parameters to inject arbitrary message headers into generated email messages. By failing to sanitize carriage return and line feed CRLF characters, an...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 一个针对 CVE-2018-7600 （又称 Drupalgeddon2 ）的 Python 概念验证（PoC）。 CVE-2018-7600 是一个影响 Drupal 7 特定版本的关键漏洞。在易受攻击的配置下，未经身份验证的攻击者可能能够注入恶意输入并实现远程代码执行。 ⚠️ 免责声明： 本项目仅用于教育目的、CTF、安全研究和授权渗透测试。未经明确许可，请勿将其用于任何系统。 功能特性 基于 Python 的 PoC 简单的命令行界面 使用 colorama 实现彩色终端输出 专为安全研究和授权测试而设计 环境要求 Python 3...

WP2Shell

WP2Shell - WordPress 预认证 RCE 漏洞利用工具 CVE-2026-63030 + CVE-2026-60137 版本: 4.0.0 作者: G0D150NE 📌 概述 WP2Shell 是一款针对 WordPress 预认证远程代码执行的全链路漏洞利用工具，它组合了两个严重漏洞： CVE-2026-63030 - REST API 批量端点中的 SQL 注入 CVE-2026-60137 - 通过 oEmbed 缓存投毒绕过身份验证 该工具允许在无需任何身份验证 的情况下完全攻陷存在漏洞的 WordPress 站点——从检测到完整的 RCE 与持久化。 ⚡...

CVE-2026-59680

An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, getpasswordterm in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString, which performs no numeric validation, and passed the resulting...

CVE-2026-59681

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

CVE-2026-25706

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

php: ext-pgsql: PHP: SQL injection via improper backslash escaping

A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...

Important: Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

An update for the php:8.2 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-25706 yast2-samba-client: OS command injection via attacker-controlled Organizational Unit (Active Directory-supplied)

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

CVE-2026-25706

CVE-2026-25706 is an OS command injection in yast2-samba-client (SUSE), triggered when an attacker-controlled Organizational Unit (OU) value from an Active Directory directory tree is passed unsanitized to an OS command during interactive domain join. A rogue domain controller or a directory user...

EUVD-2026-69002

Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root ...

n8n-CVE-2025-68613-TryHackMe

TryHackMe 房间：n8n：CVE-2025-68613 玩家： J4ck3LSyN 主机： ... 用户名： [email protected] 密码： Try12345! 方法 Payload: function return this.process.mainModule.require'childprocess'.execSync'cat flag.txt'.toString Payload 2: function return this.process.mainModule.require'childprocess'.execSync'cat...

CVE-2025-63708

CVE-2025-63708 CVE ID: CVE-2025-63708 分配日期: 2025-12-11 问题类型: CWE-79（跨站脚本） 受影响产品: “AI Font Matcher”（发布于2025-10-10，nid=18425） 产品页面: https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html 发现日期: 2025-10-11 研究人员: Dylan Davis 概要 该应用程序在处理来自 webfont...

CVE-2022-0739-Exploitation

CVE-2022-0739-Exploitation An exploitation of CVE-2022-0739. It about BookingPress WordPress plugin before 1.0.11. By using bookingpressfrontgetcategoryservices AJAX action available to unauthenticated users, leading to an unauthenticated SQL Injection. Since the plugin fails to properly sanitize...

CVE-2026-59681

CVE-2026-59681 is an OS command injection in yast2-auth-client (SUSE/YaST). The vulnerable code in Auth::AuthConf (src/lib/auth/authconf.rb) interpolates unsanitized Active Directory configuration values—Organizational Unit , dnsHostName , AD user name, and AD domain name—directly into net ads jo...

CVE-2026-59681 yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

EUVD-2026-69001

A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host. Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads...

CVE-2025-63585

CVE-2025-63585 Blind Time-Based SQL Injection in /action/rtcomments/status parameter: timestamp A blind, time-based SQL injection vulnerability was found in the timestamp parameter of the /action/rtcomments/status endpoint. An authenticated attacker who can supply this parameter may be able to...

CVE-2025-2011-poc

WordPress Depicter 插件 3.6.1 - SQL 注入 root@kitploit: usage: exploit.py -h -u URL -D DATABASE -T TABLE -C COLUMN...

EUVD-2026-68999

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via dslcmoduleprojectsoutput Shortcode in all versions up to, and including, 2.1.19 due to insufficient input sanitization and output escaping. This makes it possible for...