patch-CVE-2026-15502

Patch: CVE-2026-15502 Dettagli della vulnerabilità CVE : CVE-2026-15502 Prodotto : Microsoft Exchange Server Descrizione : SSRF che porta a RCE Gravità : Critica Stato della patch: IN REVISIONE...

Heartbleed

O servidor de teste Heartbleed. Com cache da Mozilla. Instale o SAMPLE.aws-config.json como /.aws-config.json ou /etc/aws-config.json ou em um caminho especificado pela variável de ambiente GODYNAMOCONFFILE. root@kitploit: Usage: HBserver --redir-host= --listen= --expiry= HBserver -h | --help...

react2shell

React2Shell Uno strumento CLI per sfruttare le vulnerabilità di prototype pollution nei React Server Components / Server Actions CVE-2025-55182 & CVE-2025-66478, consentendo l'esecuzione remota di codice RCE su server vulnerabili. PoC originale :...

EUVD-2026-65395

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976 Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

Apicurio/apicurio-registry: apicurio-registry: Unhardened SAXParser in content-type detection leads to blind XXE / SSRF / billion-laughs DoS

A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission or unauthenticated when the registry runs with default...

CVE-2026-16231

hbs , an Express view engine wrapping Handlebars, has a cross-site scripting vulnerability in its registerAsyncHelper API. An async helper returns an opaque placeholder during the first render pass, so Handlebars' double-brace escaping applies only to the placeholder. After rendering, hbs substit...

CVE-2026-77129

CVE-2026-77129 is a Server-Side Template Injection (SSTI) in the TYPO3 extension Event management and registration (sf_event_mgt). The extension passes an editor-configurable email subject string directly into a Fluid template source without sanitization. A backend user with edit access to the ev...

CVE-2026-77129 Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

CVE-2026-77136

CVE-2026-77136 is a Server-Side Template Injection (SSTI) in the TYPO3 extension powermail (in2code). The raw value of a form field configured as the sender name is passed directly into a Fluid template without sanitization, allowing an unauthenticated user to inject Fluid template syntax and exe...

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-022...

SECURITY-3314-3315

= SECURITY-3314/SECURITY-3315 Absicherung Dieses Repository dokumentiert Absicherungen, die die Ausnutzung von SECURITY-3314 und SECURITY-3315 auf betroffenen Instanzen verhindern. == Übersicht Der Zugriff auf die CLI muss deaktiviert werden. Beide folgenden Schritte müssen durchgeführt werden:...

ApacheRCEEssay

CVE-2021-41773 Saggio 🕸️ Descrizione 🖼️ Questo repository contiene un saggio su CVE-2021-41773, una vulnerabilità di esecuzione di codice remoto in Apache 2.4.49. È stato creato per un corso della Facoltà di Automatica e Calcolatori, Università POLITEHNICA di Bucarest, denominato "Cyberdefences and...

Detections-CVE-2026-23918

MIGRAZIONE VERSO: https://github.com/insomnisec/publiccvedetections PER UNA MIGLIORE GESTIONE A LUNGO TERMINE DELLE PUBBLICAZIONI DI DETECTION QUESTO REPO VERRÀ RIMOSSO A GIUGNO 2026 PER FAVORE UTILIZZA L'ALTRO REPO D'ORA IN POI CVE-2026-23918 "Apache HTTP/2 Double-Free" — Pacchetto di Rilevament...

CVE-2021-1675-LPE

Lokale Privilegienausweitung Edition von CVE-2021-1675/CVE-2021-34527 Lokale Privilegienausweitung Implementierung des CVE-2021-1675/CVE-2021-34527 auch bekannt als PrintNightmare. Der Exploit wurde bearbeitet aus der Veröffentlichung von Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370. Öffn...

ZeroPoint

ZeroPoint.ps1 ⚠ Ein defensives PowerShell-Dienstprogramm zur Erkennung und Eindämmung der Ausnutzung der CVE-2025-53770 Zero-Day-Sicherheitslücke in Microsoft SharePoint Server. 🔍 Was es tut Dieses PowerShell-Skript wurde entwickelt, um: Erkennen von Kompromittierungsindikatoren, wie z. B...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...