CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367 Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-45698

A flaw was found in Netatalk. A stack-based buffer overflow in the deletedir function of the afpd daemon can be exploited by a remote attacker. This occurs due to an integer underflow during path construction, which allows attacker-controlled filenames to be copied into a stack buffer without...

CVE-2026-59568

CVE-2026-59568 covers multiple vulnerabilities in Zscaler Client Connector (ZCC) that allow an unauthenticated, unprivileged remote attacker to achieve remote code execution in the ZCC context. The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector, low complexity, no pr...

CVE-2026-59568 Remote Code Execution

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

EUVD-2026-64884

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit Uno strumento di ricerca sulla sicurezza per rilevare e testare la vulnerabilità CVE-2025-63888 in ThinkPHP 5.0.24, che consente l'esecuzione remota di codice tramite attacchi di inclusione di file. ⚠️ Disclaimer Questo strumento è destinat...

CVE-2025-47812-poC

CVE-2025-47812-poC Wing FTP Server RCE CVE-2025-47812 के लिए सरल शोषण जो कमांड चलाने और रिवर्स शेल प्राप्त करने के लिए है। केवल शैक्षिक उपयोग के लिए। भेद्यता विवरण यह सुरक्षा भेद्यता RCESecurity https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/ द्वारा सार्वजनिक...

Dubbo-deserialization

Apache Dubbo Deserialisierungs-Schwachstellenforschung Dieses Repository enthält Forschungsmaterialien, Proof-of-Concept-Code und Exploitation-Tools im Zusammenhang mit Deserialisierungs-Schwachstellen in Apache Dubbo, mit besonderem Fokus auf CVE-2020-1948. Repository-Struktur Verzeichnisse...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Esecuzione di codice remoto RCE CVE-2021-4045 🔐 "PWNTAPO: Svelata l'iniezione di comandi nelle telecamere TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 Leggi l'exploit su exploit db Si tratta di una vulnerabilità di iniezione di comandi che colpisce tutte le versioni del...

EUVD-2026-64849

The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loadsjoblib.loadstrmodelfile and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that...

CVE-2026-76843 Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load

The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loadsjoblib.loadstrmodelfile and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that...

EUVD-2026-64847

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-76841 Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-76841

Xinference (by XorbitsAI) through version 2.11.0 unconditionally sets trust_remote_code=True at six model loader call sites spanning the rerank, embedding, and LLM modules. An attacker with model launch access can register a model with an unknown type and an arbitrary path, causing AutoTokenizer....

CVE-2026-76841 Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2024-42327_Zabbix_SQLi

🛡️ Script de Exploração de Injeção SQL no Zabbix 7.0.0 Um script em Python para explorar uma vulnerabilidade de injeção SQL autenticada no Zabbix 7.0.0 , suportando múltiplos modos de ação, incluindo extração de dados de usuários, vazamento de tokens de sessão, execução remota de comandos RCE e...

cve-2024-6387-poc

cve-2024-6387-poc eine Signal-Handler-Race-Condition im OpenSSH-Server sshd 7etsuo Beschreibung Ein Exploit für CVE-2024-6387, der eine Signal-Handler-Race-Condition im OpenSSH-Server sshd auf glibc-basierten Linux-Systemen ausnutzt. Die Schwachstelle ermöglicht eine Remote-Code-Ausführung als...

ROOT-APP-MAVEN-CVE-2019-16335 CVE-2019-16335 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-16335 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-19362 CVE-2018-19362 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-19362 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...