CVE-2026-49049

CVE-2026-49049 脆弱性調査: JoomShaper Helix3 Joomla における認証なし任意ファイル書き込み このリポジトリには、CMS Joomla 用のレガシーテンプレートフレームワーク JoomShaper Helix3 （バージョン 1.0 から 3.1.0 まで）で発見された重大な脆弱性 CVE-2026-49049 に関する資料、技術分析、概念実証 PoC が含まれています。 この脆弱性は、自動化されたボットネット（特に AntonKill 改ざんキャンペーンの一環として）によって実際に活発に悪用されています。 🔬 脆弱性の技術的分析 問題は、Jooml...

CVE-2026-15282

CVE-2026-15282 — Instant Appointment 批量 RCE 利用工具 预认证 filegetcontents + fileputcontents → PHP Webshell 概述 CVE-2026-15282 是 Instant Appointment WordPress 插件（≤ 1.2）中的一个严重（CVSS 9.8）未认证任意文件上传漏洞。 addservicefront AJAX 动作通过 wpajaxnopriv 注册，允许未认证访问。该处理器直接将用户提供的 imageurl 和 imagename 传递给 filegetcontents 和...

CVE-2025-55182

CVE-2025-55182 スキャナー＆エクスプロイター !Warning このリポジトリは教育および研究目的のみ を意図しています。 提供されるPoCは自身が所有するシステム 、または明示的な許可 を得たシステムでのみ使用してください。 無許可のアクセス 、悪用、またはこのリポジトリ内の素材の誤用は違法 です。 作者は不適切な使用に起因するいかなる損害、誤用、または法的結果についても一切責任を負いません 。 🔍 概要 CVE-2025-55182 は、React Server Components バージョン 19.0.0、19.1.0、19.1.1、および 19.2.0...

[SECURITY] Fedora 43 Update: perl-XML-Bare-0.53-44.fc43

This module is a 'Bare' XML parser. It is implemented in C. The parser itself is a simple state engine that is less than 500 lines of C. The parser builds a C struct tree from input text. That C struct tree is converted to a Perl hash by a Perl function that makes basic calls back to the C to go...

PrivacyRaven

注意：此项目已暂停。 PrivacyRaven 是一个用于深度学习系统的隐私测试库。 您可以用它来确定模型对不同隐私攻击的敏感性；评估隐私保护机器学习技术；开发新颖的隐私度量与攻击方法；以及将攻击方法重新用于数据溯源和其他用例。 PrivacyRaven 支持仅标签的黑盒模型提取、成员推断攻击，以及（即将推出的）模型反演攻击。 我们还计划加入差分隐私验证、自动化超参数优化、更多类别的攻击以及其他功能；更多信息请参阅 GitHub issues。 PrivacyRaven 曾在 OpenMined 隐私会议、Empire Hacking 和 Trail of Bits 博客 上亮相。...

CVE-2026-86509 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-86509

A stack-based buffer overflow exists in the udhcpcd component (specifically the sendOffer/sendACK functions in serverpacket.c) of the D-Link DIR-895L (A1, firmware 102b07). An attacker on the same local network can trigger the flaw without authentication, achieving complete impact to confidential...

CVE-2026-86509 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

EUVD-2026-72608

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

EUVD-2026-72559

knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace function that allows attackers to overwrite arbitrary files outside the project root. Attackers can supply absolute paths or relative paths containing directory traversal sequences to write malicious...

CVE-2022-22963

CVE-2022-22963 针对 CVE-2022-22963 的教育性概念验证自动化工具，已在经授权的 Hack The Box 实验室环境中演示。 概述 CVE-2022-22963 是一个 Spring Cloud Function 漏洞，涉及 spring.cloud.function.routing-expression 请求头。 在易受攻击的配置下，攻击者可滥用 Spring 表达式 语言（SpEL）的求值，通过函数路由机制 调用 Java 功能。 此仓库包含一个 Python 自动化脚本，用于复现 经授权的 CTF/实验室环境中的该漏洞。 CVE ID:...

SUSE CVE-2026-80822

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...

PT-2026-87647

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

EUVD-2026-74266

An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...

PT-2026-88013

This Microsoft Patch Tuesday, among with the historical 974 ! bugs patched, I contributed three. - Microsoft Word Remote Code Execution Vulnerability CVE-2026-78510 https://t.co/7UyCIwJTji - Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-78509 https://t.co/Nn3oKfDPL4 -...

CVE-2026-79379

A buffer overflow in the SBCDecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

PT-2026-87913

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...

PT-2026-87185

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation of the argument outerSrc/selectPhoto leads to cross site scripting. The attack may be performed from remote. The...

PT-2026-86985

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli query of the file /pages/us searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-87169

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload json/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit has been released to the public and may be...