CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Referenzlink Ursache der Schwachstelle: 1. Wenn ein Angreifer direkt auf die Solr-Konsole zugreifen kann, kann er über eine POST-Anfrage ähnlich wie /Knotenname/config die Konfigurationsdatei dieses Knotens ändern. 2. Apache Solr integriert standardmäßig das...

RP_Import_RCE

Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...

RP_DCP_Code_Exec

Vulnerabilità di esecuzione arbitraria di codice da remoto tramite l'URI 'DCP://' di Real Player Video demo: https://youtu.be/AMODp3iTnqY Lo schema URI 'DCP://' è un protocollo interno usato da Real Player per recuperare URL da visualizzare nella scheda del browser del Player. Sta per 'Data Cache...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Vulnerabilità di esecuzione remota di codice Video dimostrativo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Il componente G2 Control di Real Player contiene una vulnerabilità di esecuzione remota di codice perché consente di passare URI 'javascript...

cve-2024-56348

JetBrains TeamCity Authentifizierungs-Bypass + RCE CVE-2024-56348 PoC 📜 Beschreibung CVE-2024-56348 ist eine kritische Authentifizierungs-Bypass-Schwachstelle in JetBrains TeamCity on-premises , die alle Versionen vor 2024.12 betrifft. Die REST-API verarbeitet Anfragen an Pfade, die ;.jsp...

EUVD-2026-67223

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578

Trilium (versions ≤ 0.103.0), an open-source hierarchical note-taking application, contains a vulnerability in its default-on Safe import filter. The filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored unsanitized. A mind map node can carry a...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-18885

CVE-2026-18885 is a code injection vulnerability in the ServiceNow AI platform , specifically in its GraphQL Composite Data API , enabling an unauthenticated attacker to execute arbitrary code and access or modify instance data. The CVSS 4.0 base score is 10.0 (Critical) with all impact dimension...

CVE-2026-18885 Unauthenticated Remote Code Execution in GraphQL Composite Data API

ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and gain access to, or modify, instance data beyond...

CVE-2023-25610

CVE-2023-25610 Dépassement de mémoire en tas dans l'interface d'administration de FortiOS conduisant à une exécution de code à distance. Portée et limitations 1. Fortinet 6.x 2. Basé sur TLSv1.3, peut différer sur d'autres versions de TLS Utilisation python3 cve-2022-42475.py rhost rport lhost...

react2shell-lab

Laboratorio di Vulnerabilità React2Shell Questa è un'applicazione Next.js deliberatamente vulnerabile per testare CVE-2025-55182 e CVE-2025-66478 RCE nei React Server Components. ⚠️ AVVERTENZA : Questa applicazione è intenzionalmente vulnerabile. Utilizzare solo in ambienti di laboratorio isolati...

cve-2025-55182-react2shell-analysis

CVE-2025-55182 React2Shell — Analyse de sécurité Aperçu Ce projet est une analyse technique de CVE-2025-55182, une vulnérabilité critique d'exécution de code à distance RCE divulguée en décembre 2025. La vulnérabilité affecte les composants serveur React et permet aux attaquants d'exécuter du cod...

covenant_rce

Dieses Repository hat keine README-Datei...

CVE-2026-76640

Unitree G1 EDU firmware through 1.5.2 contains chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow an unauthenticated proximate attacker to achieve root code execution (uid 0) without pairing or credentials. The root cause involves an unquoted heredoc variable in...

CVE-2026-76640 Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack

Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials by exploiting an unquoted heredoc variable in the WiFi...

EUVD-2026-67165

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored wi...

Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin

On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub...