CVE-2026-46275

CVE-2026-46725 — RCE расширения TYPO3 ceselector Внедрение PHP-объектов через обход cookieunserialize → Удаленное выполнение кода 📋 Содержание Об уязвимости Технические детали Требования Установка Использование Примеры Формат вывода Как это работает Ссылки Юридическое предупреждение 🔍 Об уязвимос...

hibernate-orm

Hibernate ORM — это библиотека, предоставляющая поддержку объектно-реляционного отображения ORM для приложений, библиотек и фреймворков. Она также предоставляет реализацию спецификации JPA, которая является стандартной Java-спецификацией для ORM. Это репозиторий исходного кода; см. Hibernate.org...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch exploitation and patch video: https://www.youtube.com/watch?v=XU-U4K270Z4 Пост в блоге Qihoo 360...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC 로컬 보안 우회 공유 메모리를 통한 프로세스 간 통신IPC은 두 개 이상의 프로세스가 공통 메모리에 접근할 수 있는 개념입니다. 통신은 이 공유 메모리를 통해 이루어지며, 한 프로세스가 변경한 내용을 다른 프로세스가 볼 수 있습니다. Apple OS X 10.9.2까지의 커널은 XNU 객체 데이터 구조에 커널 포인터를 배치하며, 이 구조는 사용자 공간에서 접근 가능합니다. 이로 인해 로컬 사용자가 객체의 지정되지 않은 속성을 읽어 ASLR 보호 메커니즘을 더 쉽게 우회할 ...

exploit-CVE-2025-49113

Репозиторий PoC для CVE-2025-49113 Обзор CVE-2025-49113 CVE-2025-49113 — это критическая уязвимость, затрагивающая Roundcube Webmail версий до 1.5.10 и 1.6.11. Обнаруженная в 2025 году, эта ошибка позволяет удаленное выполнение кода RCE через десериализацию PHP-объектов в конечной точке...

json_cve_2020_10663

CVE-2020-10663에 대한 해결 방법json gem 취약점 json gem에는 보안 취약점 CVE-2020-10663이 있습니다. 특정 JSON 문서를 구문 분석할 때 json gem은 대상 시스템에서 임의의 객체를 생성하도록 강제될 수 있습니다. 사용자는 json 2.3.0 이상으로 업그레이드할 것을 강력히 권장합니다. json 버전을 업그레이드할 수 없는 사용자를 위해, 이 gemjsoncve202010663은 사용자의 json 버전을 CVE-2020-10663에 대해 monkey-patch합니다. 현재 버전의...

cve-2025-12735-expr-eval-rce

Эксплойт RCE для CVE-2025-12735 expr-eval Инструмент для исследования безопасности, предназначенный для обнаружения и проверки уязвимости CVE-2025-12735 в npm-пакетах expr-eval и expr-eval-fork. ⚠️ Отказ от ответственности Этот инструмент предназначен только для авторизованного тестирования...

Deserializer

Deserializer О проекте Deserializer — это продвинутый движок статического анализа абстрактного синтаксического дерева AST, предназначенный для выявления небезопасного восстановления объектов и точек сохранения состояния в экосистеме Python, с особым акцентом на области AI, LLM, робототехники, Dat...

CVE-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...

CVE-2026-93882

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...

EUVD-2026-90544

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...

CVE-2026-93882

The LearnPress – WordPress LMS Plugin (versions up to and including 4.4.8 ) is vulnerable to an Insecure Direct Object Reference (IDOR) in the CourseMaterialTemplate::render_material_items() callback. This function is exposed via the public lp-ajax-handle (load_content_via_ajax) endpoint, which i...

CVE-2025-41753

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...

EUVD-2025-211020

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...

CVE-2026-91109

The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.31 via the 'completegroup' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2026-91109

The Simply Schedule Appointments plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 1.6.12.31 . The root cause is a lack of validation on a user-controlled key within the 'complete_group' parameter. Authenticated attackers with subscri...

CVE-2026-91109 Simply Schedule Appointments <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure via 'complete_group' Parameter

The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.31 via the 'completegroup' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

EUVD-2025-209816

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_1445)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221445 advisory. OpenJDK: Improper ECDSA signature verification Libraries, 8277233 CVE-2022-21449 OpenJDK: Defective secure validation in Apache Santuario Libraries, 827800...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_4776)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20224776 advisory. Mozilla: Untrusted input used in JavaScript object indexing, leading to prototype pollution CVE-2022-1529 Mozilla: Prototype pollution in Top-Level Await...