[R1] Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1

R1 Stand-alone Security Patch Available for Tenable Enclave Security 1.7.0 and 1.8.0: SC-202608.1 Arnie Cabral Fri, 08/28/2026 - 12:01 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID | Severity |...

CVE-2026-0047-poc

CVE-2026-0047: Ausência de verificação de permissão no ActivityManagerService Um monte de bitmaps roubados de todos os aplicativos em execução — zero permissões, zero interação do usuário. A ausência de uma verificação enforceCallingOrSelfPermissionDUMP em ActivityManagerService.dumpBitmapsProto...

CVE-2026-35031

CVE-2026-35031: Path Traversal nel caricamento dei sottotitoli di Jellyfin che porta a RCE -darkred?style=flat-square -orange?style=flat-square TL;DR Una vulnerabilità critica di path traversal in Jellyfin Media Server consente agli utenti autenticati con il permesso "Upload Subtitles" di caricar...

Estudo-de-Caso-CVE-2024-21413

CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + Furto di Credenziali NTLM ⚠️ Avviso Legale: Questo repository è esclusivamente a scopo educativo e di ricerca sulla sicurezza. Tutte le dimostrazioni sono state eseguite in ambienti controllati e isolati. L'uso di queste tecniche contro...

Conti-Ransomware-DFIR-Investigation

Conti Ransomware — DFIR Investigation ProxyShell Exploitation...

CVE-2022-44830

Suggested description Die Sourcecodester Event Registration App v1.0 weist mehrere CSV-Injection-Schwachstellen über die Felder First Name, Contact und Remarks auf. Diese Schwachstellen ermöglichen es Angreifern, über eine präparierte Excel-Datei beliebigen Code auszuführen. Additional Informatio...

Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

CVE-2025-31324 Strumento di Valutazione delle Vulnerabilità e Compromissione Zero-Day SAP Rilascio Congiunto da parte di Onapsis e Mandiant Onapsis e Mandiant hanno collaborato per rilasciare uno strumento open-source per assistere i clienti SAP nell'identificazione di potenziali compromissioni...

CVE-2024-50340

CVE-2024-50340 POC Requisiti L'opzione registerargcargv deve essere abilitata nel file di configurazione PHP php.ini. Questa impostazione carica gli argomenti della riga di comando e i parametri della query in $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit 📋 Ov...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - बिना प्रमाणीकरण के LFI उपयोग root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress...

CVE-2024-21262

AUFZEICHNUNGEN Nur zur Reproduktion von CVEs. Verwandte Ressourcen: LINK GITHUB1 GITHUB2 ISSUE Umgebungen prüfen Lade docker-24.0.6.tgz von https://download.docker.com/linux/static/stable/x8664/ herunter. root@kitploit: sudo mkdir -p /usr/local/docker-24.0.6 sudo tar -xzf docker-24.0.6.tgz -C...

DEBIAN-CVE-2026-82247

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

CVE-2026-82247

gitoxide's gix-url crate ?@ so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions = 0.49.0 fixed in 0.58.1...

CVE-2026-82111

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component uploadimage. Performing a manipulation of the argument imagepath results in path traversal. The attack can be initiated remotely. The...

metabase-sql-poc

CVE-2026-72898 — Metabase Unauthenticated SQL Injection PoC...

OpenNebula-CVE-2025-56537

OpenNebula-CVE-2025-56537 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in virtual network template Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Prova de Conceito :...

React2P4IM0Nshell

React2P4IM0Nshell 💥Ferramenta de Extensão para Auditoria e Exploração avançada RCE/Source Leak/DoS CVE-2025-55182/83/84 para ambientes Next.js e React Server Components RSC diretamente do seu navegador, com terminal linux incorporado na própria extensão para receber qualquer reverse shell ❌ ⚡...

CVE-2022-26937

PoC di crash di Windows Network File System CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical...

CVE-2025-55182

CVE-2025-55182 — React2Shell Pre-Authentifizierung Remote Code Execution in React Server Components RSC, Next.js und verwandten Frameworks. Übersicht CVE-2025-55182 auch bekannt als React2Shell ist eine kritische Pre-Authentifizierung RCE-Schwachstelle, die das React Server Components RSC Ökosyst...

CVE-2026-82112 houtini-ai houtini-lm code_task_files index.ts path traversal

A flaw has been found in houtini-ai houtini-lm up to 2.13.2. The impacted element is an unknown function of the file src/index.ts of the component codetaskfiles. Executing a manipulation can lead to path traversal. The attack can be launched remotely. This patch is called...