CVE-2025-55182-exploit

CVE-2025-55182 Exploit Questo repository contiene un semplice exploit per CVE-2025-55182 , una vulnerabilità critica di esecuzione remota di codice in React Server Components. Panoramica della Vulnerabilità CVE-2025-55182 è una vulnerabilità di esecuzione remota di codice non autenticata in React...

My-Sigma-Rule-Collection

Raccolta di regole Sigma create da me a partire da ricerche che ho trovato interessanti Panoramica Questo repository contiene una raccolta di regole Sigma personalizzate che ho creato/trovato basandomi su vulnerabilità, report di minacce e tecniche che ho trovato interessanti. Ogni regola include...

CVE-2022-30040

ثغرة رفض الخدمة في Tenda AX1803 v1.0.0.12890 نظرة عامة معلومات موقع الشركة المصنعة: https://www.tenda.com.cn/profile/contact.html عنوان تحميل البرنامج الثابت: https://www.tenda.com.cn/download/default.html وصف الثغرة تقع الثغرة في نظام الملفات rootfsubifs، وتحديدًا في /goform/SetSysTimeCfg داخل...

Docx-Exploit-2021

Docx-Exploit-2021 Este exploit docx utiliza arquivos res dentro de arquivos .docx do Microsoft para executar arquivos maliciosos. Este exploit está relacionado ao CVE-2021-40444 Se não conseguir reproduzir Por favor, envie-me uma mensagem no Telegram: LazarusRebor...

python-inquestlabs

EINGESTELLT November 2025 inquestlabs Eine Pythonic-Schnittstelle und ein Befehlszeilenwerkzeug für die Interaktion mit der InQuest Labs API. Beachten Sie, dass für die Interaktion mit dieser API kein API-Schlüssel erforderlich ist. Ein API-Schlüssel bietet jedoch die Möglichkeit, den Lookback zu...

bitpixie

bitpixie Per il blog completo clicca qui Riferimenti principali Articolo del blog di syss Repository Github di Syss Implementazione dell'attacco Bitpixie a BitLocker Riproduzione in ambiente virtuale. La macchina locale macchina attaccante utilizza Ubuntu 22.04.5 LTS, mentre le macchine vittima...

Scalar-Venom-Attack

Questo documento analizza le vulnerabilità crittografiche scoperte nelle moderne infrastrutture di gestione delle chiavi crittografiche, con particolare attenzione ai difetti critici nell'architettura dei moduli di sicurezza hardware HSM nella gestione delle chiavi private a curva ellittica. Lo...

CVE-2026-82111 iswalle getnote-mcp upload_image index.ts fs.readFileSync path traversal

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

CVE-2026-82111 iswalle getnote-mcp upload_image index.ts fs.readFileSync path traversal

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

EUVD-2026-67588

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

CVE-2026-82111

iswalle getnote-mcp (up to version 1.5.0 ) is affected by a path traversal vulnerability in the upload_image component. The affected element is the fs.readFileSync function in src/index.ts, where manipulation of the image_path argument allows an attacker to read files outside the intended directo...

CVE-2025-64446

POC - CVE-2025-64446 - पाथ ट्रैवर्सल + ऑथ बायपास के माध्यम से FortiWeb RCE अवलोकन Fortinet उत्पाद आज एंटरप्राइज़ नेटवर्क की सुरक्षा करने वाले सबसे अधिक युद्ध-परीक्षित उपकरणों में से हैं — और विडंबना यह है कि जिस क्षण कोई Forti उपकरण कमजोर हो जाता है, विस्फोट का दायरा विनाशकारी होता है। 2025 के अं...

react2shell-scanner

🚨 React2Shell Scanner RCE con CVSS 10.0 nei React Server Components. La tua app React 19 è vulnerabile? Scanner rapido e accurato per CVE-2025-55182 React2Shell - una vulnerabilità critica di esecuzione remota di codice sfruttata attivamente in ambienti reali. Zero falsi positivi grazie al...

API-Security-Checklist

English | 繁中版 | 简中版 | العربية | Azərbaycan | Български | বাংলা | Català | Čeština | Deutsch | Ελληνικά | Español | فارسی | Français | हिंदी | Indonesia | 日本語 | 한국어 | ພາສາລາວ | Македонски | മലയാളം | Монгол | Nederlands | Polski | Português Brasil | Русский | ไทย | Türkçe | Українська | Tiếng Việt...

CVE-2026-75143

A flaw was found in FFmpeg. A heap buffer overflow in the RIST protocol reader allows a remote attacker to trigger memory corruption by sending an oversized packet to an FFmpeg instance receiving a RIST stream. The libristread function ignores its buffer size argument, copying the full payload in...

CVE-2026-82259 SvelteKit 2.49.0 before 2.53.3 Denial of Service via form

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82259

SvelteKit versions 2.49.0 through 2.53.2 (fixed in 2.53.3 ) are affected by a deserialization expansion vulnerability in the experimental form remote function . When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files....

EUVD-2026-67585

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82259 SvelteKit 2.49.0 before 2.53.3 Denial of Service via form

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...

CVE-2026-82259 SvelteKit 2.49.0 before 2.53.3 Denial of Service via form

SvelteKit versions from 2.49.0 through 2.53.2 fixed in 2.53.3 contain a deserialization expansion issue in the experimental form remote function. When an application enables experimental.remoteFunctions and uses the form function to process the files array without validating files.length or...