CVE-2026-77991

Joomla Event Manager (a Joomla extension from joomlaeventmanager.net) versions prior to 5.0.1 are vulnerable to privileged remote code execution due to a flaw in the administrator source model , which allows writing dangerous file types including PHP. An authenticated attacker with high privilege...

CVE-2026-77991 Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

EUVD-2026-66866

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2026-77991 Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2025-60595

CVE-2025-60595 SPH Engineering UgCS 5.13.0 मनमाना कोड निष्पादन Arbitrary code execution के प्रति संवेदनशील है। यह CVE साइट पर उपयोग के लिए सार्वजनिक संदर्भ है। SPH Engineering के स्वामित्व वाले उत्पाद पर मनमाना कोड निष्पादन। UGCS 5.13.0! Ardupilot/mavparse.py की सीधी पंक्तियाँ, पंक्ति 230 "243: s...

copyfail-go

CopyFail Go A maioria dos LPEs do Linux precisa de uma janela de corrida ou de um offset específico do kernel. Copy Fail é uma falha lógica em linha reta — não precisa de nenhum dos dois. O mesmo script Python de 732 bytes binário Go estático dá root a todas as distribuições Linux lançadas desde...

htb-labs-orion

🚀 HTB Labs - Orion English | EspañolREADME-ES...

CVE-2021-4034

CVE-2021-4034 Questo è un exploit creato per CVE-2021-4034 pensato come POC. Si basa sulle informazioni presenti su https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. Come usarlo: Scarica la cartella dell'exploit. Compila prog.c con gcc prog.c Vai nella cartella GCONVPATH=. e assicurati...

CVE-2021-4034-POC

CVE-2021-4034-POC POC für die von Qualys entdeckte pwnkit-Schwachstelle. Kompilieren & ausführen: root@kitploit: gcc lpe.c -o lpe; ./lpe Erstellt die folgende Verzeichnis-/Dateistruktur: root@kitploit: /tmp ├── GCONVPATH=. │ └── test ├── payload.c ├── payload.so ├── test │ └── gconv-modules...

log4j-exploit-builder

log4j-exploit-builder Skript zum Erstellen eines log4j-Exploits CVE-2021-44228 mit Unterstützung für verschiedene Methoden, um eine Reverse Shell zu erhalten HINWEIS: Der Code wurde schnell zusammengestellt und wird in Zukunft verbessert...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performe...

RS4LOGJ-CVE-2021-44228

RS4LOGJ-CVE-2021-44228 Vulnerabilidade do Apache Log4j - CVE-2021-44228 instruções para Remote Syslog: O Remote Syslog utiliza o módulo Elasticsearch para salvar os logs. Produtos afetados: RSv2 RSE RSX O RSC não é afetado. Verificação: Verifique a versão: root@kitploit: curl -XGET...

CVE-2026-80524

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...

CVE-2026-20841

CVE-2026-20841 – Windows-Notepad-RCE PoC für eine Schwachstelle zur Remote-Codeausführung im Markdown-Renderer von Windows Notepad. Die Markdown-Engine schränkt URL-Protokolle nicht ein, sodass über klickbare Links beliebige Protokoll-Handler ausgelöst werden können. Haftungsausschlüsse 1. Nicht...

CVE-2026-21852-PoC

Demo Educativa sulle Vulnerabilità di Claude Code Questo progetto dimostra tre vulnerabilità divulgate da Check Point Research nel tool CLI Claude Code di Anthropic. È progettato per studenti e ricercatori di cybersecurity per comprendere come funzionano gli attacchi alla supply chain degli...

CVE-2025-60375

CVE-2025-60375 — Umgehung der Authentifizierung in PerfexCRM Advisory-ID: perfexcrm-auth-bypass-2025 CVE: CVE-2025-60375 Produkt: PerfexCRM Betroffene Versionen: Versionen vor 3.3.1 3.3.1 Gemeldet von: Ajansha Shankar, Ahamed Yaseen Referenzen: OWASP Authentication Cheat Sheet —...

CVE-2026-31431

Copy Fail CVE-2026-31431 - Analisi Completa 1. Panoramica della Vulnerabilità Nome della Vulnerabilità: Copy Fail Identificatore CVE: CVE-2026-31431 Scoperta da / Autori: Xint Code Research Team basandosi sulla ricerca fondamentale iniziale del ricercatore Theori Taeyang Lee. "Copy Fail" è una...

CVE-2026-59275 Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-59275 Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2024-57487-and-CVE-2024-57488

Vulnerabilità del Sistema di Noleggio Auto Online Questo repository contiene i dettagli sulle vulnerabilità identificate nel progetto Code-Projects Online Car Rental System Versione 1.0. Alle vulnerabilità sono stati assegnati CVE e includono writeup completi per aiutare a comprendere e mitigare ...