fortinet-fortiweb-cve-2025-64446-58034

Scopri le vulnerabilità di Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Panoramica Fortinet FortiWeb è un dispositivo Web Application Firewall WAF ampiamente implementato nei sistemi aziendali per proteggere le applicazioni web dalle minacce comuni. Poiché FortiWeb si trova spesso nello...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo lokale Privilegieneskalation – Workflow und POC CVE-2024-32019 Workflow Automatischer Exploit Ressourcen Workflow !TIP Bitte lesen Netdata ist ein Tool zur Überwachung von Anwendungen und Systemen. Es läuft auf Port 19999 und ist leicht zu finden: root@kitploit:...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

EUVD-2026-65328

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586

CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...

MAL-2026-14489 Malicious code in hydration-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c60e3a0dd707077bad78ec7f0e5f79032dc9b86814d65bfd0083275a6059de The package advertises itself as a dependency-free streak/date-math library but ships an x8664 Linux ELF at dist/internal/calc.dat and auto-launches...

Malicious code in hydration-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c60e3a0dd707077bad78ec7f0e5f79032dc9b86814d65bfd0083275a6059de The package advertises itself as a dependency-free streak/date-math library but ships an x8664 Linux ELF at dist/internal/calc.dat and auto-launches...

MAL-2026-14488 Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

Malicious code in secretkey-2fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeed1d38c9d76ae5e5f6657f1935bfd276c102c5d245b0992f6b57e5855a24cd Package presents itself as a zero-dependency TOTP library but its postinstall hook node lib/core.js and its advertised validateSecret API both trigge...

MAL-2026-14485 Malicious code in secretkey-2fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeed1d38c9d76ae5e5f6657f1935bfd276c102c5d245b0992f6b57e5855a24cd Package presents itself as a zero-dependency TOTP library but its postinstall hook node lib/core.js and its advertised validateSecret API both trigge...

WooRefer

WooRefer | CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce Strumento automatico di massa per verificare e sfruttare la vulnerabilità in CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh...

vBulletin-CVE-2025-48828-Multi-target

💥 Scanner per l'esecuzione remota di codice in vBulletin replaceAdTemplate Questo strumento Python automatizza il rilevamento di vulnerabilità di RCE non autenticata in vBulletin tramite il vettore di exploit replaceAdTemplate. Basato sul proof-of-concept originale di EgiX , questa versione...

CVE-2025-32463_illdeed

CVE-2025-32463 — Exploit di elevazione dei privilegi di sudo -R variante illdeed Questo è un proof-of-concept PoC rifattorizzato per CVE-2025-32463, una vulnerabilità critica in sudo versioni 1.9.14 fino a 1.9.17 che consente l'elevazione locale dei privilegi a root tramite sudo -R e un modulo NS...

Security update for runc

This update for runc rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Enterprise Storage...

Security update for distribution

This update for distribution rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

Security update for rootlesskit

This update for rootlesskit rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...