CVE-2026-75917 SiYuan before v3.7.4 XSS-to-RCE via pathName.ts

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation app/src/util/pathName.ts, getLeaf/movePathTo used by the 'move/link to' path-selection dialogs, where document metadata fields bookmark, alias, memo, and an alternate name field a...

PaperCut - Unauthenticated Remote Code Execution

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

MINI-R86X-8JJM-CPHQ

Bulletin has no description...

MINI-G3C3-5V25-P4C2

Bulletin has no description...

MINI-5J5F-2PV9-999P

Bulletin has no description...

MINI-H498-GRPW-2M86

Bulletin has no description...

MINI-W56R-6XV5-R5WV

Bulletin has no description...

CVE-2026-73389

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

EUVD-2026-62375

Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...

CVE-2026-66613

JetEngine plugin ≤ 3.8.14 allows unauthenticated remote code execution. CVSS 9.8 (CRITICAL). PatchStack documented it. No exploitation evidence or fixed version provided in documents. Upgrade to latest plugin version as precautionary measure. Monitor vendor announcements for official patch release.

mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and...

CVE-2026-58087

creationtimestamp| type| source ---|---|--- 2026-08-19 12:15:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58087...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 – Apache ActiveMQ Remote Code Execution Ove...

Update Chrome now: Two critical vulnerabilities fixed

Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. How to update Chrome If you...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Beschreibung Diese Nuclei-Vorlage erkennt Apache Tomcat-Server, die anfällig für die TOCTOU-Race-Condition sind, die eine Remote Code Execution RCE ermöglicht. ⚠ Wichtiger Hinweis : Diese Vorlage darf ausschließlich zu Bildungszwecken und in kontrollierten Umgebunge...

CVE-2022-22963_Reverse-Shell-Exploit

Exploit Reverse Shell CVE-2022-22963 Questo è uno script Python che sfrutta CVE-2022-22963, una vulnerabilità di esecuzione di codice in remoto in Spring Cloud Function che consente agli attaccanti di eseguire codice arbitrario su un server vulnerabile. L'exploit utilizza l'endpoint vulnerabile...

s2-048

s2-048 Exp per s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

CVE-2019-5544_CVE-2020-3992

Scanner per servizi SLP CVE-2019-5544 CVE-2020-3992 Script Python che implementa il protocollo SRVLOC/SLP per scansionare i servizi OpenSLP abilitati. Può risultare utile durante la ricerca di sistemi colpiti da CVE-2019-5544, CVE-2020-3992 o CVE-2021-21974 ... Maggiori informazioni sulla...

fusionpbx_rce_vulnerability

مقدمة يحاول هذا الكود البسيط إكمال تنفيذ الثغرة المتسلسلة التي قدمها Dustin Cobb في مقال RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE خطوات إعادة الإنتاج 1. اعرض شاشة المشغل الضعيفة في متصفح ويب، والموجودة في هذا المثال على الرابط...

CVE-2021-21014

PoC Limitado CVE-2021-21014 As versões 2.4.1 e anteriores, 2.4.0-p1 e anteriores e 2.3.6 e anteriores do Magento são vulneráveis a um bypass de restrição de upload de arquivos. Uma exploração bem-sucedida pode levar à execução arbitrária de código por um atacante autenticado. Versão afetada: =...