CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...

CVE-2026-5201

CVE-2026-5201 gdk-pixbuf JPEGローダーにおけるヒープベースのバッファオーバーフロー こんにちは、Kağan Çapar です。私は、実質的にすべてのLinuxデスクトップ環境に影響するgdk-pixbufのJPEG画像ローダーにおけるヒープベースのバッファオーバーフロー脆弱性を発見しました。この脆弱性には CVE-2026-5201 が割り当てられ、Red Hat によって CVSS スコア 7.5 重要 として確認されました。 このリポジトリには、私の完全な分析、ゼロから作成した再現コード、および実際の Ubuntu 24.04 LTS...

AWS-Tough-Library-Multiple-CVEs

مكتبة AWS Tough: ثغرات CVE متعددة في مارس 2025، تم الكشف عن عدة ثغرات أمنية في مكتبة Tough التابعة لـ AWS Labs وهي عميل Rust لتطبيق TUF – The Update Framework. يتم تتبع هذه المشكلات تحت CVE-2025-2885 وCVE-2025-2886 وCVE-2025-2887 وCVE-2025-2888، وتم إصلاحها في الإصدار 0.20.0 من Tough. يمكن لمهندس...

CVE-2025-6058

⚡ WPBookit = 1.0.4 - Unauthenticated Arbitrary File Upload 📝 Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle function, which is hooked via the addbookingtype route in all versions up to, and...

BIT-LIBPYTHON-2026-19553 SSLContext.wrap_bio() missing validation of server_hostname parameter

ssl.SSLContext.wrapbio didn't require the serverhostname argument to not be None if ssl.SSLContext.checkhostname was set. Due to a missing parameter check in SSLObject, if the serverhostname argument isn't supplied then hostname verification would be silently skipped. This defect could lead to...

CVE-2026-23008-Solidity-Assembly-Return-Data-Size-Confusion

CVE-2026-23008 – Confusion sur la taille des données de retour en assembly Solidity Code du programme Solidity // ReturnSizeConfusion.sol contract Victim function callExternaladdress target external returns bytes memory bool success, bytes memory ret = target.callabi.encodeWithSignature"someFunc"...

CVE-2025-49132-PoC

CVE-2025-49132-PoC Proof-of-Concept for CVE-2025-49132 for Remote Code Execution in Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t Technical Details Analyzing the git diff of LocaleController.php between v1.11.10 and v1.11.11 link, we can see that the controller...

CVE-2026-25126

CVE-2026-25126 : Manipulation du compteur de votes PolarLearn Recherche : Joshua van Rijswijk Description PoC pour CVE-2026-25126 , une vulnérabilité de logique métier de haute sévérité dans l'API de vote du forum PolarLearn. Le point de terminaison POST /api/v1/forum/vote ne parvient pas à...

CVE-2026-33317

CVE-2026-33317 Preuve de concept OP-TEE PKCS11 Ce dépôt contient la preuve de concept du monde normal, les notes de reproduction, et les journaux capturés pour CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. L'avis officiel OP-TEE décrit une validation manquante dans entrygetattributevalue pour...

CVE-2025-10147

CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - Unauthenticated Arbitrary File Upload The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6...

CVE-2024-50473

CVE-2024-50473 Ajar in5 Embed = 3.1.3 - Unauthenticated Arbitrary File Upload Description: The Ajar in5 Embed plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.1.3. This makes it possible for unauthenticated...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - Remote Code Execution RCE Authenticated Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm: https://wordpress.org/plugins/wp-all-import/advance...

CVE-2026-106569

The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) attack in its ASE decoder . Due to missing validation and resource checks, a specially crafted ASE image can cause the application to crash or trigger a long-running operation . This vulnerability affects versi...

CVE-2026-106219

JetBrains TeamCity versions prior to 2026.2.1 are vulnerable to an information disclosure issue due to insufficient validation of Git submodule URLs . This flaw allows an attacker to perform unauthorized reading of local repositories hosted on the server. To remediate this vulnerability, users sh...

EUVD-2026-93302

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

PT-2026-106646

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA INTERVAL PROBE TIME MS. NDTPA INTERVAL PROBE TIME MS sets .type and .min but misses .validation type, so no validation is applied: ynl --family rt-neigh --do setneightbl --json '"name": "arp...

CVE-2025-65094

CVE-2025-65094: WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation IDOR Overview Field| Details ---|--- CVE ID| CVE-2025-65094 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products WBCE/WBCECMS Details Summary A low-privileged user in WBCE CMS...