EUVD-2026-64847

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-76841 Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-76841

Xinference (by XorbitsAI) through version 2.11.0 unconditionally sets trust_remote_code=True at six model loader call sites spanning the rerank, embedding, and LLM modules. An attacker with model launch access can register a model with an unknown type and an arbitrary path, causing AutoTokenizer....

CVE-2026-76841 Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2026-76841 Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites pass trustremotecode=True as a literal or as an unconditional default: RerankModel.gettokenizer in...

CVE-2024-42327_Zabbix_SQLi

🛡️ Script de Exploração de Injeção SQL no Zabbix 7.0.0 Um script em Python para explorar uma vulnerabilidade de injeção SQL autenticada no Zabbix 7.0.0 , suportando múltiplos modos de ação, incluindo extração de dados de usuários, vazamento de tokens de sessão, execução remota de comandos RCE e...

cve-2024-6387-poc

cve-2024-6387-poc eine Signal-Handler-Race-Condition im OpenSSH-Server sshd 7etsuo Beschreibung Ein Exploit für CVE-2024-6387, der eine Signal-Handler-Race-Condition im OpenSSH-Server sshd auf glibc-basierten Linux-Systemen ausnutzt. Die Schwachstelle ermöglicht eine Remote-Code-Ausführung als...

ROOT-APP-MAVEN-CVE-2019-16335 CVE-2019-16335 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2019-16335 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-19362 CVE-2018-19362 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-19362 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2020-24750 CVE-2020-24750 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-24750 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2025-47812-poc

CVE-2025-47812 Exploit di Remote Code Execution RCE per Wing FTP Server CVE-2025-47812 📌 Crediti : Vulnerabilità scoperta da Julien @MrTuxracer. Questa implementazione del PoC si basa sulla loro ricerca originale. Questo repository contiene un exploit Python per la vulnerabilità di Remote Code...

RLSA-2026:58561 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

python-urwid security update

An update is available for python-urwid. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

RLSA-2026:58562 Important: python-urwid security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Peyara-FileUpload

एक्सप्लॉइट शीर्षक: Peyara रिमोट माउस v1.0.1 बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड दिनांक: 2025-01-06 एक्सप्लॉइट लेखक: tmrswrr सॉफ़्टवेयर लिंक: https://peyara-remote-mouse.vercel.app/ प्लेटफ़ॉर्म: विंडोज़ संस्करण: v1.0.1 परीक्षण किया गया: विंडोज़ 10 root@kitploit: USAGE : python3 combinedscript.py...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

🔍 Scanner RCE per Next.js - CVE-2025-55182 e CVE-2025-66478 Un potente e facile da usare scanner per rilevare vulnerabilità critiche RCE nelle applicazioni Next.js 🎯 Panoramica Uno scanner avanzato di vulnerabilità per rilevare CVE-2025-55182 e CVE-2025-66478 - vulnerabilità critiche di Esecuzion...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...