CVE-2025-71406

A flaw was found in Nokogiri, which bundles a vulnerable version of libxslt. This vulnerability involves a use-after-free condition that can be triggered by processing specially crafted Extensible Stylesheet Language Transformations XSLT. A remote attacker could exploit this to cause memory...

richfaces-vulnerability-cve-2018-12533-rf-14310

Dimostra il difetto presente in RichFaces 3.3.4 di esecuzione remota di codice e come mitigare e/o bloccare Esempio di attacco Clonare il repository Decodificare il payload Deserializzare la classe Java Generare un payload per testare la vulnerabilità Come mitigare? Se hai davvero bisogno di ques...

xz-backdoor-vulnerability

لا يحتوي هذا المستودع على ملف README...

CLSA-2026-1787839491 TuxCare security update for vite (1 CVE)

TuxCare rebuilt vite to address 1 CVE. Fixed in 6.4.2-tuxcare.1...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

ECHO-85B0-6A57-A5E5

Bulletin has no description...

exploit_cve-2021-29447

exploitcve-2021-29447 Solo per scopi educativi. Questo exploit dovrebbe essere uno strumento davvero comodo per ottenere qualsiasi file da un server che esegue WordPress 5.6.2 e PHP 8. vedi https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 Tutto ciò di cui hai bisogno è...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – Divulgazione di informazioni sul trasferimento di zona DNS AXFR Codice del programma server DNS Python + attacco root@kitploit: dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class...

CVE-2022-50999

A flaw was found in Nokogiri. An integer overflow vulnerability in packaged libxml2 buffer handling functions allows a remote attacker to cause out-of-bounds memory writes. By crafting specially designed, large XML files, an attacker can trigger buffer overflows, leading to potential information...

CVE-2022-50998

A flaw was found in Nokogiri, a Ruby gem for parsing XML and HTML documents. This vulnerability arises from issues within its bundled libxml2 library, specifically involving data corruption from entity reference cycles and integer overflows when processing large XML files. A remote attacker could...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – Iniezione SQL nel checkpoint SQLite di LangGraph CVE-2025-67644 è una vulnerabilità di SQL Injection CWE-89 nel pacchetto langgraph-checkpoint-sqlite parte dell'ecosistema LangGraph / LangChain. Consente a un attaccante di iniettare SQL arbitrario tramite chiavi di filtro dei...

MAL-2026-14562 Malicious code in morglog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a235e0a68454b169ea87b641ecd9cd2ce75b50b4d99b02a66a686311abe38892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14561 Malicious code in module-relpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97776a8746c6c0d75fee50594f26150e0a791d97ade2056c489c1ca8da0196ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14566 Malicious code in veloq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec9a4513d507544ac89ac6fa13523ea603e88cd4a0d8c455e6002c8b7f984a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14564 Malicious code in sigcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6670894a8b878e4fe65bf49b51f64d4d612d0ba0e95cd7de0a019d3ed386f24c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-57499 Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

EUVD-2026-67136

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

CVE-2026-57499 Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

CVE-2026-57499

Liman , an open-source server management tool, contains an OS command injection vulnerability in its log rotation configuration endpoint (LogRotationController ). The ip_address parameter is embedded directly into a shell command without sanitization, allowing an authenticated administrator to es...

CVE-2016-4971

CVE-2016-4971 CVE-2016-4971 Wget 1.18/1.14-13.el7 Client-Exploit Wget 1.18 Exploit für beliebiges Datei-Upload UND Wget 1.14-13.el7 Exploit für beliebiges Datei-Upload Modifikationen von: mbadanoiu Original-Exploit Dawid Golunski dawid at legalhackers.com...