CVE-2026-105123

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123: Unrestricted Upload of File with Dangerous Type

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-11645

CVE-2026-11645 - V8 en Google Chrome anterior a Ejecución Remota de Código Uso Rápido python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Notas de Explotación Gravedad: ALTA CVSS: 8.8 Impacto: Confidencialidad, Integridad, Disponibilidad Publicado: 2026-06-09 Resumen...

CVE-2026-74469

⚡ CVE-2026-74469 — DiagSpill Linux Kernel SCTP Peer Transport Count Overflow A Linux kernel SCTP vulnerability caused by a 16-bit peer transport counter overflow , allowing the counter to wrap from 65535 to 0. During an SCTP diagnostic dump, the wrapped value can cause insufficient skb payload...

CVE-2025-25257

CVE-2025-25257 FortiWeb CVE-2025-25257 漏洞利用 https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce exp.py: 完整/可用的漏洞利用程序。 signed.py: 仅文件读/写的概念验证。漏洞利用的初始版本。...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...

CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

W vincent-peugnet/wcms through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in POST /api/v0/media/upload/:path. Attackers can upload .php files executed by the web server, use encoded ../ sequences...

Exploit for Argument Injection in Thecodingmachine Gotenberg

🔥 GOTENBERG RCE CHAIN CVE-2026-42589 + CVE-2026-40281 !...

huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...

[SECURITY] [DLA 4816-1] pcre2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4816-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso October 03, 2026 https://wiki.debian.org/LTS -...

external_curl_AOSP10_r33_CVE-2021-22924

| | | | | | / | | | | | | | | | || | | | |/|| \| LÉAME Curl es una herramienta de línea de comandos para transferir datos especificados con sintaxis URL. Descubra cómo usar curl leyendo la página de manual curl.1 o el documento MANUAL. Descubra cómo instalar Curl leyendo el documento INSTALL...

CVE-2026-43499-ZFOLD4

CVE-2026-43499-ZFOLD4 Port de investigación específico del dispositivo de CVE-2026-43499 IonStack PI write-what-where para el Galaxy Z Fold4 canadiense SM-F936W con firmware F936WVLU1AVGA. Este repositorio es la contraparte para Fold4 de CVE-2026-43499-S24U y CVE-2026-43499-A36. Captura el progre...

CVE-2026-52832-PoC-exploit-nuclio-dashboard

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard modo NOP acepta POST /api/functions sin autenticación. El campo spec.handler no está validado como ruta, por lo que ../../../../tmp/x.txt:handler escapa del directorio temporal de compilación mediante path.Join, permitiendo a un atacant...

CVE-2026-27971_POC

CVE-2026-27971 — PoC de RCE no autenticado en Qwik server$ !WARNING Este repositorio contiene una prueba de concepto activa de ejecución remota de código. Úsala únicamente contra sistemas que poseas o para los que tengas autorización explícita de prueba. El autor no asume responsabilidad alguna p...

CVE-2017-1000028

CVE-2017-1000028 PoC y exploit para GlassFish4.1.1 no incluye 4.1.1. Parámetros: -u: Para una URL única pero sin mostrar /etc/passwd. -ut: Para una URL única pero mostrando /etc/passwd. -f: Lee la URL desde url.txt y comprueba si la URL es vulnerable. -c: Debe usarse con el parámetro "-u", por...

CVE-2016-5195

CVE-2016-5195: condición de carrera del núcleo Linux Dirty COW Investigación defensiva, validación no armamentizada y análisis de parche para CVE-2016-5195 Dirty COW, una condición de carrera de copia en escritura copy-on-write del núcleo Linux que puede permitir que un usuario local modifique...

CVE-2026-104286-POC

Exploit de Path Traversal en FortiMail CVE-2026-104286 Descripción general Exploit avanzado de escritura arbitraria de archivos remota y no autenticada para CVE-2026-104286 en FortiMail. Las solicitudes HTTP/HTTPS manipuladas eluden la sanitización de rutas en el cliente web, lo que permite la...

CVE-2026-103648

CVE-2026-103648 — Path Traversal in image-downloader Discovered by:Amirhossein Roustaei @EterNullSec — Eternull Security 📖 Full technical writeup:eternull.net/posts/cve-2026-103648-image-downloader-path-traversal ⚠️ Educational Purposes Only. This repository documents a responsibly disclosed...