CVE-2026-35031

CVE-2026-35031: Jellyfin Untertitel-Upload Path Traversal zu RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Eine kritische Path-Traversal-Schwachstelle im Jellyfin Media Server ermöglicht es authentifizierten Benutzern mit der Berechtigung „Untertitel hochladen“, Dateien an...

React2P4IM0Nshell

React2P4IM0Nshell 💥Erweiterungstool für erweiterte Audits und Exploitation von RCE/Source-Leak/DoS CVE-2025-55182/83/84 für Next.js- und React-Server-Components-Umgebungen RSC direkt aus deinem Browser, mit integriertem Linux-Terminal in der Erweiterung selbst, um jede Reverse Shell zu empfangen ...

CS4277-CVE-Path-Traversal-Apache-HTTP-Server

CS4277-CVE-Path-Traversal-Apache-HTTP-Server Membros da Equipe: Emily Nguyen, Jonathan Kim, Joon Jang Seleção de Tópico do Projeto: Projeto 1: Recriar e Explorar uma CVE do Mundo Real: Path Traversal CVE-2021-41773 no Apache HTTP Server. Objetivo do Projeto: Esperamos reproduzir a CVE-2021-41773...

OpenJDK: Enhance TLS server (2026-08 Security Update)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle...

CVE-2026-68745

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

CVE-2026-59085

Server-Side Request Forgery SSRF vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1....

CVE-2026-59085

A Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module allows exploitation via webhook delivery requests, requiring no authentication and no user interaction. Affected versions are 4.20.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 . The CVSS v3.1 score is 9...

CVE-2026-59085 Apache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook module

Server-Side Request Forgery SSRF vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1....

EUVD-2026-63830

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

RLSA-2026:55775 Moderate: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about...

java-1.8.0-openjdk security update

An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime...

CVE-2024-54385

CVE-2024-54385 Radio Player = 2.0.82 - تزوير الطلبات من جانب الخادم دون مصادقة الوصف إضافة Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player لوردبريس معرّضة لثغرة تزوير الطلبات من جانب الخادم Server-Side Request Forgery في جميع الإصدارات حتى 2.0.82 وضمنه. وهذا يتيح للمهاجمين غير...

CVE-2024-54330

CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★...

dnscat2-powershell

dnscat2 ist ein DNS-Covert-Channel-Tool von @iagox86 Ron Bowes, das zur Übertragung von Daten über DNS-Anfragen verwendet wird. Dies ist eine Powershell-Version des dnscat2 C-Clients. Klicken Sie hier für einen Blogbeitrag, der eine detailliertere Erklärung des Zwecks dieses Skripts und seiner...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

IDArling

Avviso Questo progetto non è più in sviluppo attivo e il fork più ricco di funzionalità e aggiornato è probabilmente più interessante per i nuovi arrivati. Inoltre, IDA ha annunciato un supporto ufficiale per sessioni di reverse engineering collaborative e si potrebbe anche attendere questo...