RedArrow

RedArrow3.2 - Guide d'utilisation de l'outil d'exécution de commandes à distance ThinkPHP 5.0.23 1. Présentation de l'outil RedArrow3.2 est un outil graphique pour la vulnérabilité d'exécution de commandes à distance ThinkPHP 5.0.23, offrant deux fonctionnalités principales : l'exécution de...

CVE-2024-24919-Exploit

Scanner de vulnérabilité CVE202424919 Cet outil Java scanne une liste d'adresses IP pour la vulnérabilité CVE-2024-24919. Il tente d'exploiter la vulnérabilité et offre des options pour afficher les données du corps de la réponse et modifier le répertoire du fichier cible. Table des matières...

CVE-2025-55182

CVE-2025-55182 Outil d'exploitation RCE Next.js 🚀 Il s'agit d'un outil automatisé de preuve de concept PoC pour la vulnérabilité d'exécution de code à distance RCE Next.js React Server Components CVE-2025-55182. Cet outil intègre un Shell interactif , une identification intelligente du protocole ...

React2Shell

🚀 R2S - Framework d'exploitation RSC pour Next.js Framework avancé de post-exploitation pour l'exécution de code à distance RCE sur les composants serveur React de Next.js Fonctionnalités • Installation • Utilisation • Commandes • Exemples 📋 Aperçu R2S est un framework complet d'exploitation et d...

CVE-2009-4623

CVE-2009-4623 Удаленная оболочка для CVE-2009-4623: Получите неинтерактивную оболочку, откройте другую оболочку для расширенного использования !!! usage: CVE-2009-4623.sh hostnameandPath example: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php options: -h этот хлам...

CVE-2011-2523

CVE-2011-2523 Ceci était une vulnérabilité présente dans le service vsFTPd 2.3.4, qui via le port 6200 effectue une redirection donnant accès à un shell interactif, interprétant ainsi des commandes. https://www.exploit-db.com/exploits/49757...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

RHEL 9 : libxml2 (RHSA-2026:70639)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70639 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

CVE-2026-91921

CVE-2026-91921 is a Cross-Site Scripting (XSS) vulnerability in the client-side rendering engine of the 1millionbot AI Chat Platform , caused by inadequate input sanitisation. An unauthenticated remote user can trigger the issue by sending messages containing Markdown syntax and certain unsanitis...

CVE-2026-13379

A flaw was found in the Windows interactive service of OpenVPN. A remote attacker can exploit this vulnerability by sending a specially crafted search domain during the disconnection process. This can lead to persistent DNS Domain Name System state pollution, which may disrupt network services, o...

CVE-2026-84088 Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and above to inject and store JavaScript that executes in the browse...

CVE-2026-84088

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin, versions before 1.7.9 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to validate or sanitize a widget link setting before it is stored and subsequently used in a JavaScript navigation call . This ...

CVE-2026-84088 Xpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle Widget

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and above to inject and store JavaScript that executes in the browse...

CVE-2026-92801: Incorrect Authorization

cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive card callbacks. Attackers can dispatch agent commands by triggering card actions in admitted chats, bypassing the per-user access controls that protect the text message handle...

Astra Linux – Vulnerability in PostgresSQL 11

A flaw was discovered in the psql interactive terminal of PostgreSQL in versions prior to 13.1, prior to 12.5, prior to 11.10, prior to 10.15, prior to 9.6.20, and prior to 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary cod...

CVE-2026-90895: Missing Authorization

Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch shows that CLI access could differ from the web application in multiple security-sensitive areas: - feed listings did...

PT-2026-91127

Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies. The patch shows that CLI access could differ from the web application in multiple security-sensitive areas: - feed listings did...