993007 matches found
CVE-2018-14667
CVE-2018-14667 このCVEを理解し、正しく悪用するために多くの時間を費やした後、RichFaces 3.X RCEバグに関するリポジトリを構築し、そのHOWTOをコミュニティと段階的に共有することにしました。 0x00 : RichFaces 3.X バグの概要 11月19日月曜日、 Joao F M Figueiredo 氏は、重大な高リスクのRichFaces脆弱性に関する詳細な記事（https://seclists.org/fulldisclosure/2018/Nov/47）を公開しました。 CVSS3 ベーススコア 9.8...
CVE-2026-84326
A flaw was found in chromium-browser. This uninitialized resource vulnerability allows a remote attacker to execute arbitrary code within the sandbox by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized operations within the affected system. Mitigation...
CVE-2022-46169_unauth_remote_code_execution
CVE-2022-46169 - 認証されていないリモートコード実行 Cacti Cacti 1.2.23 および 1.3.0 における認証バイパスとコマンドインジェクションを介した認証されていないリモートコード実行 免責事項: このスクリプトはシステムのセキュリティを監査するためのものです。このスクリプトは、自身のシステム、または明示的に使用許可を得たシステムでのみ使用してください。...
CVE-2024-55963
CVE‑2024‑55963 Appsmith RCE PoC CVE‑2024‑55963 の PoC エクスプロイト。脆弱な Appsmith インスタンス上で任意のコマンドを実行したり、リバースシェルを生成します。 自動的に最新のサーバー（ environmentId 機能を持つ）とそれ以前の古い「レガシー」ビルドの両方を処理するため、v1.20 から最後の脆弱なリリース v1.51 までのすべてのバージョンで1つのスクリプトを使用できます。 クイックスタート root@kitploit: Run an arbitrary command default is id python3...
cve-2020-7247
cve-2020-7247 漏洞名称：OpenSMTPD 6.6.2 - 远程代码执行 发布日期：2020-01-29 漏洞作者：1F98D 原始作者：Qualys Security Advisory 厂商主页：https://www.opensmtpd.org/ 软件链接：https://github.com/OpenSMTPD/OpenSMTPD/releases/tag/6.6.1p1 版本：OpenSMTPD 6.6.2 测试环境：OpenBSD 6.6, OpenBSD 6.5, OpenBSD 6.4, OpenBSD 5.9 OpenSMTPD 在提交 a8e222352f...
CVE-2022-30525
CVE-2022-30525 CVE-2022-30525 POCエクスプロイト 使用方法 root@kitploit: usage: exploit.py -h -t TARGET -lhost LOCALHOST -lport LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET IP address of the target, eg: https://127.0.0.1:9443 -lhost LOCALHOST, --localhos...
HeimShell
HeimShell CVE-2023-51803 HeimShell は CVE-2023-51803 のエクスプロイトであり、LinuxServer.io Heimdall ≤ 2.5.6 の任意ファイルアップロード脆弱性を悪用します。ターゲットのバージョンを自動検出し、悪用可能性を警告するか、SHELLURL で定義された PHP シェルをリモート取得します。 ≤ 2.2.2 : 任意ファイルアップロードは可能ですが、ファイルは静的ファイルとして配信され、URL はリモート取得されません。 ≥ 2.2.3 & ≤ 2.5.6: アイコン URL アップロードを介して PHP...
PaloAltoRceDetectionAndExploit
PaloAlto Rce 検出と悪用 脆弱性 CVE-2017-15944 の検出 今のところ、この脆弱性を検出する脆弱性スキャナは存在しない 検出と悪用...
UBUNTU-CVE-2026-52022
An issue in kamailio v.6.1.1 and before allows a remote attacker to ca...
The vulnerability of the Workers mechanism in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.
The vulnerability of the Workers mechanism in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code within the sandbox.
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox environment using a specially created HTML page...
PT-2026-84883
A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is the function ImageData of the file gui agents/s1/utils/ocr server.py of the component OCR HTTP API. Executing a manipulation of the argument img bytes can lead to resource consumption. The attack m...
RockyLinux 8 : gimp:2.8 (RLSA-2026:62507)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62507 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on...
FreeBSD : Erlang/OTP -- remote crash via gen_tcp with {packet,4} (62b56853-a609-11f1-9195-4c526214c986)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 62b56853-a609-11f1-9195-4c526214c986 advisory. The OTP 29.0.6 release notes report: A gentcp socket using the inet driver and packet,4 had a bug if...
Sangoma Switchvox SQL Injection Vulnerability
Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution...
PT-2026-84882
A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function of the file code agent.py of the component CodeAgent. Such manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
PT-2026-84884
A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possibl...
PT-2026-84885
A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function shell exec of the file crates/openfang-runtime/src/tool runner.rs. This manipulation causes uncontrolled memory allocation. The attack is possible to be carried out remotely. The exploit ha...
Malicious code in chromatitle-dev (npm)
The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...
