CVE-2026-47117-openmed-rce

CVE-2026-47117: OpenMed Execução Remota de Código Não Autenticada via Carregamento de Modelo PII Gravidade: Crítica, CVSS 4.0 9.3 , CVSS 3.1 9.8 atribuída pela VulnCheck, a CNA Vetor v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vetor v3.1:...

CVE-2026-47103-python-statemachine-rce

CVE-2026-47103: Python StateMachine Remotecodeausführung über SCXML-eval-Injection Schweregrad: Kritisch, CVSS 4.0 9.3 , CVSS 3.1 9.8 vergeben von VulnCheck, der CNA Vektor v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vektor v3.1:...

apache-cve-2021-42013-rce

apache-cve-2021-42013-rce Laboratorio di penetration testing basato su Docker che simula la vulnerabilità CVE-2021-42013 Path Traversal & RCE su Apache HTTP Server 2.4.49. Questo progetto è stato preparato per simulare e sfruttare exploit la vulnerabilità CVE-2021-42013 presente su Apache HTTP...

Malicious code in @syncraft-labs/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3986bd05347035d9263c22b871840f19dc42187d3e1719311cb67c6e1ef5cb9 dist/index.js the ESM entry resolved by default by modern bundlers such as Vite, Next.js, and Webpack contains a heavily obfuscated block using...

MAL-2026-14368 Malicious code in @syncraft-labs/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3986bd05347035d9263c22b871840f19dc42187d3e1719311cb67c6e1ef5cb9 dist/index.js the ESM entry resolved by default by modern bundlers such as Vite, Next.js, and Webpack contains a heavily obfuscated block using...

MAL-2026-14369 Malicious code in @syncraft-labs/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...

Malicious code in @syncraft-labs/vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...

Malicious code in @syncraft-labs/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efe219063a966d0d2025d6c3274cbc7e9f3c0b3a1e9cdf81c7adf6dbae4d4ac The ESM build shipped at dist/index.js contains a heavily obfuscated payload hex-identifier string-array + rotator produced by an obfuscator.io-style...

MAL-2026-14367 Malicious code in @syncraft-labs/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efe219063a966d0d2025d6c3274cbc7e9f3c0b3a1e9cdf81c7adf6dbae4d4ac The ESM build shipped at dist/index.js contains a heavily obfuscated payload hex-identifier string-array + rotator produced by an obfuscator.io-style...

CVE-2022-22965

POC Spring4Shell CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof of Concept. Die Benennung dieser Schwachstelle basiert auf den Ähnlichkeiten mit dem berüchtigten Log4j LOG4Shell. Details zu dieser Schwachstelle https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...

couchdb-exploit

🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB – Privilegieneskalation & Remote-Codeausführung 📖 Überblick Dieses Tool nutzt zwei kritische Schwachstellen in Apache CouchDB aus: CVE| Beschreibung| Schweregrad ---|---|--- CVE-2017-12635| Privilegieneskalation durch...

GitLab 18.8 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-10053)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an...

PT-2026-79764

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC Questo repository contiene il codice proof of concept PoC per la riproduzione e la ricerca della vulnerabilità Next.js CVE-2025-66478. Include un'applicazione Next.js vulnerabile e uno script di exploit in Node.js per testare la vulnerabilità. English · 中文 Cos'è...

wp2shell-Exploit-Waf-Bypass

root@kitploit: | \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 by Venexy M4xSec Nicht authentifizierte Remote-Codeausführung auf WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Behoben in 6.8.6,...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critica vulnerabilità di Unrestricted File Upload in Elementor Pro Potenzialmente in grado di portare a Remote Code Execution RCE ⚠️ Panoramica CVE-2026-32475 è una vulnerabilità critica che interessa Elementor Pro , un plugin...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow OSS Esecuzione Remota di Codice Non Autenticata RCE Vulnerabilità critica di esecuzione remota di codice non autenticata che interessa IBM Langflow OSS. La vulnerabilità deriva dalla combinazione di due debolezze: 1. /api/v1/autologin può rilasciare un bearer token...

CVE-2026-60004-poc-gitea

CVE-2026-60004 Proof-of-Concept PoC Überblick Dieses Repository enthält ein Proof-of-Concept-Tool für CVE-2026-60004, einen authentifizierten oder vorauthentifizierten Remote-Code-Execution-RCE-Vektor, der bestimmte Gitea-Versionen über die diffpatch-Hook-Injection-Technik betrifft. Die primäre...

CVE-2024-6333

CVE-2024-6333 - Xerox Authentifizierte Remote-Codeausführung Authentifizierte Remote-Codeausführung in Xerox-WorkCentre-Druckern über die Funktion „Network Troubleshooting Log". Beschreibung Die Funktion „Network Troubleshooting Log" /properties/security/networktroubleshootinglog.php bereinigt de...

CVE-2024-45519-Zimbra-Real-Fix

CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 echter Fix - Offizieller Patch ist unvollständig CVE-2024-45519 - Echter Zimbra-Fix ⚠️ Warnung CVE-2024-45519 ist eine kritische RCE-Schwachstelle CVSS 9.8 in der Zimbra Collaboration Suite. Viele Administratoren glauben, dass sie nach dem...