268498 matches found
MAL-2026-14369 Malicious code in @syncraft-labs/vue (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78f28562113db7a203dc694bdff7b3884e8a6e252754b6bd845aab3fefe065f The ESM build dist/index.js of @syncraft-labs/[email protected] contains a heavily obfuscated payload injected alongside the otherwise-legitimate Vue plugin...
Malicious code in @syncraft-labs/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efe219063a966d0d2025d6c3274cbc7e9f3c0b3a1e9cdf81c7adf6dbae4d4ac The ESM build shipped at dist/index.js contains a heavily obfuscated payload hex-identifier string-array + rotator produced by an obfuscator.io-style...
MAL-2026-14367 Malicious code in @syncraft-labs/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efe219063a966d0d2025d6c3274cbc7e9f3c0b3a1e9cdf81c7adf6dbae4d4ac The ESM build shipped at dist/index.js contains a heavily obfuscated payload hex-identifier string-array + rotator produced by an obfuscator.io-style...
CVE-2022-22965
POC Spring4Shell CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof of Concept. Die Benennung dieser Schwachstelle basiert auf den Ähnlichkeiten mit dem berüchtigten Log4j LOG4Shell. Details zu dieser Schwachstelle https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...
couchdb-exploit
🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB – Privilegieneskalation & Remote-Codeausführung 📖 Überblick Dieses Tool nutzt zwei kritische Schwachstellen in Apache CouchDB aus: CVE| Beschreibung| Schweregrad ---|---|--- CVE-2017-12635| Privilegieneskalation durch...
GitLab 18.8 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-10053)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an...
PT-2026-79764
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...
CVE-2025-66478-Exploit-PoC
CVE-2025-66478 Exploit PoC Questo repository contiene il codice proof of concept PoC per la riproduzione e la ricerca della vulnerabilità Next.js CVE-2025-66478. Include un'applicazione Next.js vulnerabile e uno script di exploit in Node.js per testare la vulnerabilità. English · 中文 Cos'è...
wp2shell-Exploit-Waf-Bypass
root@kitploit: | \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 by Venexy M4xSec Nicht authentifizierte Remote-Codeausführung auf WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Behoben in 6.8.6,...
CVE-2026-32475
🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critica vulnerabilità di Unrestricted File Upload in Elementor Pro Potenzialmente in grado di portare a Remote Code Execution RCE ⚠️ Panoramica CVE-2026-32475 è una vulnerabilità critica che interessa Elementor Pro , un plugin...
CVE-2026-9198
CVE-2026-9198 - IBM Langflow OSS Esecuzione Remota di Codice Non Autenticata RCE Vulnerabilità critica di esecuzione remota di codice non autenticata che interessa IBM Langflow OSS. La vulnerabilità deriva dalla combinazione di due debolezze: 1. /api/v1/autologin può rilasciare un bearer token...
CVE-2026-60004-poc-gitea
CVE-2026-60004 Proof-of-Concept PoC Überblick Dieses Repository enthält ein Proof-of-Concept-Tool für CVE-2026-60004, einen authentifizierten oder vorauthentifizierten Remote-Code-Execution-RCE-Vektor, der bestimmte Gitea-Versionen über die diffpatch-Hook-Injection-Technik betrifft. Die primäre...
CVE-2024-6333
CVE-2024-6333 - Xerox Authentifizierte Remote-Codeausführung Authentifizierte Remote-Codeausführung in Xerox-WorkCentre-Druckern über die Funktion „Network Troubleshooting Log". Beschreibung Die Funktion „Network Troubleshooting Log" /properties/security/networktroubleshootinglog.php bereinigt de...
CVE-2024-45519-Zimbra-Real-Fix
CVE-2024-45519-Zimbra-Real-Fix Zimbra CVE-2024-45519 echter Fix - Offizieller Patch ist unvollständig CVE-2024-45519 - Echter Zimbra-Fix ⚠️ Warnung CVE-2024-45519 ist eine kritische RCE-Schwachstelle CVSS 9.8 in der Zimbra Collaboration Suite. Viele Administratoren glauben, dass sie nach dem...
westone-CVE-2021-21972-scanner
westone-CVE-2021-21972-scanner Vulnerabilidade de execução remota de código no VMware vCenter Server. Um invasor malicioso com acesso à porta 443 pode enviar uma requisição cuidadosamente construída ao vCenter Server, o que eventualmente causará execução remota arbitrária de código. Instalação e...
CVE-2024-56264
CVE-2024-56264 Exploit per WordPress ACF City Selector - Caricamento Arbitrario di File CVE-2024-56264 Panoramica Questa repository contiene un exploit per CVE-2024-56264 , una vulnerabilità di Caricamento Arbitrario di File presente nel plugin WordPress ACF City Selector versioni = 1.14.0. Quest...
Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control (CVE-2026-9762)
Summary IBM® Db2® is vulnerable to remote code execution when jdbc url is under user control. Vulnerability Details CVEID:CVE-2026-9762 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. CWE:CWE-94:...
magento2-template-filter-patch
Patch del filtro template di Magento 2 per CVE-2022-24086, CVE-2022-24087 Patch di Magento 2 per CVE-2022-24086, CVE-2022-24087. Risolve la vulnerabilità RCE e i bug correlati eseguendo un escaping profondo delle variabili dei template. Se non puoi aggiornare Magento o non puoi applicare le patch...
CVE-2024-31114
CVE-2024-31114 - WordPress Shortcode Addons RCE Exploit Shortcode Addons = 3.2.5 – Authentifizierter Admin+ Upload beliebiger Dateien CVE-ID: CVE-2024-31114 CVSS-Score: 9.1 Kritisch 🛠️ Schwachstellenbeschreibung Das Shortcode Addons – with Visual Composer, Divi, Beaver Builder, and Elementor...