CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...

CVE-2026-5201

CVE-2026-5201 Débordement de tampon basé sur le tas dans le chargeur JPEG de gdk-pixbuf Bonjour, je suis Kağan Çapar. J'ai découvert une vulnérabilité de débordement de tampon basé sur le tas dans le chargeur d'images JPEG de gdk-pixbuf qui affecte pratiquement tous les environnements de bureau...

EUVD-2026-76105

Headroom vulnerable to Cross-Site WebSocket Hijacking CSWSH...

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Téléchargement arbitraire de fichiers sans authentification 📝 Description Le plugin WPBookit pour WordPress est vulnérable au téléchargement arbitraire de fichiers en raison de l'absence de validation du type de fichier dans la fonction imageuploadhandle, qui est accrochée vi...

AWS-Tough-Library-Multiple-CVEs

Множественные CVE в библиотеке AWS Tough В марте 2025 года в библиотеке Tough от AWS Labs Rust-клиент реализации TUF – The Update Framework были раскрыты множественные уязвимости безопасности. Эти проблемы отслеживаются под идентификаторами CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 и...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Путаница с размером возвращаемых данных в ассемблере Solidity Программный код Solidity // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc";...

CVE-2025-49132-PoC

CVE-2025-49132-PoC Proof-of-Concept for CVE-2025-49132 for Remote Code Execution in Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t Technical Details Analyzing the git diff of LocaleController.php between v1.11.10 and v1.11.11 link, we can see that the controller...

CVE-2026-25126

CVE-2026-25126: Манипуляция подсчётом голосов в PolarLearn Исследование: Joshua van Rijswijk Описание PoC для CVE-2026-25126 — уязвимости бизнес-логики высокой степени серьёзности в API голосования форума PolarLearn. Конечная точка POST /api/v1/forum/vote не обеспечивает строгую проверку поля...

CVE-2026-33317

CVE-2026-33317 OP-TEE PKCS11 PoC Этот репозиторий содержит proof of concept для Normal World, заметки по воспроизведению и захваченные журналы для CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. Официальный advisory OP-TEE описывает отсутствие проверки в entrygetattributevalue для PKCS11CMDGETATTRIBUTEVALU...

CVE-2025-10147

CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - Unauthenticated Arbitrary File Upload The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6...

CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - Téléchargement de fichier arbitraire non authentifié Description: Le plugin Ajar in5 Embed pour WordPress est vulnérable aux téléchargements de fichiers arbitraires en raison d'un manque de validation du type de fichier dans toutes les versions jusqu'à la...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Téléchargement arbitraire de fichiers authentifié Subscriber+ Exploit FileOrganizer - CVE-2024-7985 📌 Aperçu CVE-2024-7985 - Le plugin WordPress FileOrganizer = 1.0.9 est vulnérable à des téléchargements arbitraires de fichiers authentifiés , permettant à...

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - Remote Code Execution RCE Authenticated Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm: https://wordpress.org/plugins/wp-all-import/advance...

Rocky Linux 10.1 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_3887)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263887 advisory. postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2006 postgresql: PostgreSQL intarray missing...

CVE-2026-19553

The Python ssl.SSLContext.wrap_bio() method fails to require a non-None server_hostname argument even when ssl.SSLContext.check_hostname is enabled. Due to a missing parameter check in SSLObject , omitting the server_hostname argument causes certificate hostname verification to be silently skippe...

SUSE CVE-2026-97450

In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places ACPICA: validate handler object type in acpievhasdefaulthandler and acpievfindregionhandler...

CLEANSTART-2026-CC59685 fast-uri serializes the port component of a URI without validating it

Security vulnerability affects the langfuse package. fast-uri serializes the port component of a URI without validating it...

CVE-2025-65094

CVE-2025-65094: WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation IDOR Overview Field| Details ---|--- CVE ID| CVE-2025-65094 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A low-privileged user in WBCE CMS...