CVE-2025-1306

Newscrunch Exploit CVE-2025-1306 🚨 Panoramica Questo exploit prende di mira una vulnerabilità di Cross-Site Request Forgery CSRF verso upload arbitrario di file CVE-2025-1306 nel tema WordPress Newscrunch. A causa della mancata validazione nonce nella funzione newscrunchinstallandactivateplugin, ...

CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 Script di exploit per ScottCart 🧑‍💻 Di Nxploit – Khaled Alenazi 📌 Descrizione Il plugin ScottCart per WordPress versioni ≤ 1.1 è vulnerabile a Esecuzione Remota di Codice RCE. Ciò consente ad attaccanti non autenticati di eseguire funzioni PHP arbitrarie sul server...

awesome-mba

Questa repo contiene collegamenti pertinenti all'offuscamento Mixed Boolean-Arithmetic MBA. Le pull request sono benvenute. Si noti che alcune risorse qui non sono strettamente correlate all'MBA, sebbene tutte siano rilevanti in qualche modo. Articoli Information Hiding in Software with Mixed...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

CVE-2025-9345

Proof of Concept Path Traversal in File Manager, Code Editor, and Backup di Managefy Tipo di vulnerabilità: Path Traversal Download arbitrario di file Funzione interessata: ajaxdownloadfile Impatto: Gli utenti autenticati con privilegi bassi Subscriber+ possono scaricare file arbitrari dal server...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

CVE-2025-55182

CVE-2025-55182 - React2Shell Ein modifizierter und verbesserter Exploit für CVE-2025-55182, eine Pre-Authentication Remote Code Execution in React Server Version 19.0, 19.1.0, 19.1.1 und 19.2.0 Die Schwachstelle betrifft die folgenden: react-server-dom-webpack react-server-dom-parcel...

cve-2026-43499

IonStack Exploit del kernel per Redmi Pad Pro dizi / POCO Pad 5G. Distribuzione su Cloudflare Pages Integrazione Git 1. Vai su Cloudflare Dashboard Workers & Pages Create Pages Connect to Git 2. Seleziona questo repository 3. Impostazioni di build: Framework preset: None Build command: lascia vuo...

CVE-2026-82253

gitoxide Rust crates gix = 0.72.0 and gix-validate = 0.10.0 contains a path traversal vulnerability. The submodule name validation function in gix-validate only checks the first occurrence of '..' via name.findb"..", allowing crafted names such as 'a..b/../../../.git/' to bypass the check;...

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process...

CVE-2026-82259

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82111

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

CVE-2026-6128

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

CVE-2026-18393

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

Security update for python36

This update for python36 fixes the following issues: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bytes bsc1261969...

CVE-2024-30051

CVE-2024-30051 — Estouro de Heap no DWM do Windows para EoP · Pesquisa de Tese de Mestrado -orange Estouro de Buffer Baseado em Heap no Gerenciador de Janelas da Área de Trabalho do Windows dwmcore.dll Escalação de Privilégio Local → Nível de Integridade SYSTEM via processo DWM Alvo de compilação...

CVE-2019-0708-Windows

CVE-2019-0708-Windows Questo articolo condivide la vulnerabilità del servizio Desktop remoto di Windows CVE-2019-0708 e spiega nel dettaglio la vulnerabilità e le misure difensive. L'autore, un principiante della sicurezza informatica, condivide alcuni tutorial di autoapprendimento di base,...

pdf.js-CVE-2024-4367

🚨 CVE-2024-4367 - Universeller PDF.js-Schwachstellenscanner ⚠️ KRITISCHES SICHERHEITSTOOL | Erkennt CVE-2024-4367 CVSS 9.8 - Sicherheitslücke zur Remote-Codeausführung in PDF.js Funktioniert auf JEDER Website - Keine Konfiguration erforderlich 📋 Inhaltsverzeichnis 📖 Übersicht ⚡ Schnellstart 🔍 Was...

CVE-2025-32462_32463-Lab

CVE-2025-32462 & CVE-2025-32463 – PoC-Labor Dies ist ein containerbasiertes Labor und PoC für die folgenden Schwachstellen in sudo: CVE-2025-32462 – sudo -h Bypass der Host-Matching-Logik CVE-2025-32463 – sudo -R Chroot-NSS-Bibliotheks-Escape 🔒 Nur zu Bildungszwecken. Nicht auf Systemen verwenden...