CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target root@kitploit: python poc.py https://192.168.32.130 + https://192.168.32.130 is vulnerable blog: https://rustlang.rs/posts/simple-help/...

cve-2022-23131

cve-2022-23131 poc...

CVE-2022-26135

-CVE-2022-26135- CVE-2022-26135 CVE-2022-26135 poc https://www.xust.edu.cn/cve/index.jsp...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Escalatione dei Privilegi Locali nel Kernel Linux algifaead CISA KEV | CVSS 7.8 ALTO | Interessa i kernel Linux 4.14 – inizio 2026 9 anni Indice 1. Sintesi Esecutiva 2. Valutazione del Rischio 3. Analisi Tecnica Approfondita 4. Metodologia di Attacco — Red Team 5...

CVE-2026-53435

CVE-2026-53435 — Jenkins-Deserialisierung → Beliebiges Dateilesen PoC Erstes öffentliches Proof-of-Concept für CVE-2026-53435, erstellt als nur die Empfehlung existierte und kein PoC veröffentlicht war. Rekonstruiert aus einer vagen einzeiligen Empfehlung in 8,5 Stunden an einem Freitagabend –...

CVE-2026-44252

creationtimestamp| type| source ---|---|--- 2026-08-21 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/wazuh-poc-pubblici-per-lo-sfruttamento-di-varie-vulnerabilita 2026-08-22 12:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtobot72lj2t...

CVE-2026-19846 TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2026-19790

A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the function formSetPortMirror of the file /goform/module of the component httpd Web Management Interface. Such manipulation of the argument portMirrorMirroredPorts leads to stack-based buffer overflow. The attack can b...

CVE-2026-30965

creationtimestamp| type| source ---|---|--- 2026-08-13 09:00:07+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-30965.yaml 2026-08-14 00:00:09+00:00| confirmed|...

PT-2026-58886

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, Notepad++ validates the backupFilePath attribute from session.xml with std::wstring::starts with against the expected backup directory without path normalization, allowing parent-directory sequences during snapshot-mode...

CVE-2026-42048

creationtimestamp| type| source ---|---|--- 2026-04-27 10:45:50+00:00| published-proof-of-concept| https://github.com/langflow-ai/langflow/security/advisories/GHSA-9whx-c884-c68q 2026-05-14 05:44:30+00:00| seen|...

Confluence Unauthorized RCE Vulnerability

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 the fixed version for 6.6.x, from version 6.7.0 before 6.12.3 the fixed version for 6.12.x, from version 6.13.0 before 6.13.3 the fixed version for 6.13.x, and from version 6.14.0 before 6.14.2 the fixed version for...

CVE-2019-0604

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka ‘Microsoft SharePoint Remote Code Execution Vulnerability’. This CVE ID is unique from CVE-2019-0594. Recent assessments: zeroSteiner at March 20,...

Metasploit Wrapup

Metasploit Hackathon We were happy to host the very first Metasploit framework open source hackathon this past week in the Rapid7 Austin. Eight Metasploit hackers from outside of Rapid7 joined forces with the in-house team and worked on a lot of great projects, small and large. @bcook started the...