drupalgeddon2-CVE-2018-7600

Drupal - Drupalgeddon2 CVE 2018-7600 root@kitploit: $ python3 drupalgeddon.py -h + drupalgeddon2 CVE-2018-7600 exploit by Rafael Caria usage: drupalgeddon.py -h --url URL --command COMMAND --function FUNCTION --test --proxy PROXY ! This script exploits CVE-2018-7600 a Drupal property injection in...

[SECURITY] Fedora 45 Update: openssl-4.0.2-1.fc45

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Exploit for Out-of-bounds Read in Linux Linux_Kernel

Abraxas Labs ·...

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control (CVE-2026-19273)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-19273 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to...

ShuckNT

🔐 ShuckNT：破解前先对哈希脱壳 | Shuck.sh 的脚本 ShuckNT 是 Shuck.sh 在线服务用于本地部署的脚本（在线试用！）。它旨在降级、转换、剖析和脱壳基于数据加密标准（DES）的身份验证令牌。 支持的算法 / 格式： MSCHAPv2 NETNTLM LM|NTHASH PPTP-VPN $99$ 以上全部支持任意挑战值！ ShuckNT 依赖哈希脱壳原理来优化挑战-响应破解和可利用性。...

Security Bulletin: Security Vulnerability identified in libthrift-0.23.0.jar used by IBM Maximo Application Suite - MREF ( CVE-2026-43871, CVE-2026-45112, CVE-2026-48586 )

Summary There is a vulnerability in libthrift-0.23.0.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-43871 DESCRIPTION: Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects...

Security Bulletin: Denial of Service Security Vulnerability in Spring Framework Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22740)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-22740 DESCRIPTION: A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstance...

Security Bulletin: Security Misconfiguration Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22748)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-22748 DESCRIPTION: Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecode...

DEBIAN-CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2025-49493

Akamai CloudTest XXE Exploit CVE-2025-49493 Overview This is a Python-based exploit for CVE-2025-49493 , which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint. Vulnerability Details CVE ...

CVE-2025-55182-POC

CVE-2025-55182 POC 与检测 React Server Components RSC 不安全反序列化漏洞利用与检测工具集合 漏洞信息 CVE-ID : CVE-2025-55182 影响版本 : React 19.x, Next.js 15.x/16.x（使用 App Router 时） 攻击向量 : RSC Flight 协议反序列化时通过原型污染实现 RCE 风险等级 : 严重（CVSS 10.0） 📦 组件 1. 漏洞环境 Docker docker-compose.yml - Next.js 15.0.3 + React 19.0.0-rc...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036：SpeechBrain 通过 CKPT.yaml 解析实现任意代码执行 严重性： 高危，CVSS 4.0 8.7 ，CVSS 3.1 8.8 （由 CNA VulnCheck 分配） 向量（v4.0）： CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 向量（v3.1）： CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 受影响版本： SpeechBrain listcheckpoints - constructcheckpointobjec...

MAL-2026-16139 Malicious code in tailwind-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f4a69a3b50ac2347f8b3324abca2c0df1cf83422ee0f164b799cb748fa76b5 The package presents itself as a Tailwind CSS forms plugin but its main entry src/index.js is a heavily obfuscated module obfuscator.io-style rotatin...

Malicious code in tailwind-form-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f4a69a3b50ac2347f8b3324abca2c0df1cf83422ee0f164b799cb748fa76b5 The package presents itself as a Tailwind CSS forms plugin but its main entry src/index.js is a heavily obfuscated module obfuscator.io-style rotatin...

CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

PSF-2026-40

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

EUVD-2026-76162

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...