vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

packetfence-CVE-2024-39024

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Low level authenticated user to admin RCE CVE: CVE-2024-3924 Timeline: Discovered - ly1g3 Reported - ly1g3...

CVE-2026-82592

D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFormat Vulnerability Details Detail Information Field| Value ---|--- Vendor| D-Link Product| D-Link DIR-825M and other models sharing the same firmware codebase Affected Version| Firmware v1.1.8 Vulnerability Type| Stack-based Buffer...

BIT-VIRTUALENV-2026-102937 virtualenv: Command injection via --prompt in activate.bat (batch activator)

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, BatchActivator.quote returns prompt text unchanged before activate.bat inserts it into a cmd.exe set "VAR=value" statement. An attacker who influences --prompt, VIRTUALENVPROMPT, or the corresponding...

Axis1.4-CVE-2019-0227

Axis1.4 CVE-2019-0227 Herramienta de explotación de ejecución remota de comandos 📖 Descripción de la vulnerabilidad Apache Axis1.4 contiene una vulnerabilidad de ejecución remota de comandos CVE-2019-0227. Cuando la propiedad enableRemoteAdmin está establecida en true, un atacante puede desplegar...

proofpoint-CVE-2023-0089

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución Remota de Código - Usuario autenticado de bajo nivel a RCE de administrador CVE: CVE-2023-0089 Cronología: Descubierto ...

React2Shell-POC

This Proof of Concept PoC for React2Shell CVE-2025-55182 vulnerability has been developed strictly for educational and research purposes only. It is intended to demonstrate the existence and potential impact of a specific security vulnerability in a controlled, authorized, and non-production...

patch-CVE-2026-14290

Patch: CVE-2026-14290 Vulnerability Details CVE : CVE-2026-14290 Product : Palo Alto PAN-OS Description : Command injection in GlobalProtect Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-05-20 Status| deployed Deployed To| Production Validated By| SecOps Team...

POC-CVE-2026-93674

Description POC-CVE-2026-93674 Authenticated Blind command injection proof of concept exploit code Usage python3 poc.py -u -uname -pword -c -a "" PoC Execution PoC Output...

CVE-2026-27626-PoC

CVE-2026-27626 — Inyección de Comandos del SO en OliveTin PoC Resumen | ---|--- ID de CVE| CVE-2026-27626 Componente| OliveTin Clase de Vulnerabilidad| CWE-78: Neutralización Incorrecta de Elementos Especiales usados en un Comando del SO CVSS 3.1| 9.9–10.0 Crítico —...

USN-8874-1: sg3_utils vulnerability

Shaomin Chen discovered that sg3utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands...

USN-8874-1 sg3-utils vulnerability

Shaomin Chen discovered that sg3utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands...

CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versiones Uso CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1 CVE-2026-102255 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this...

CVE-2025-7775-PoC

CVE-2025-7775 | NetScaler ADC RCE PoC ⚠️ Disclaimer: This is a hypothetical PoC for educational purposes only.Segment NetScaler networks CVE-2025-7775 does not exist. Use only in an isolated lab. Overview Simulated exploit for a hypothetical unauthenticated RCE in Citrix NetScaler ADC/Gateway...

CVE-2026-3300

CVE-2026-3300 - Wordpress ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual...

vsftpd-cve-2011-2523-lab

Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...

CVE-2012-2982

CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...

cve-2025-50946

cve-2025-50946 Script de explotación para CVE-2025-50946 OliveTin get-theme RCE. Los requisitos de caracteres son exigentes y muchos comandos que incluyen múltiples argumentos pueden no ejecutarse correctamente. No he dedicado tiempo a investigar la causa raíz ni a hacer el script más robusto...

CVE-2026-11417-AWS-CDK-RCE

Inyección de Comandos en la Cadena de Suministro en NodejsFunction de AWS CDK CVE-2026-11417 Autor: Hesham Ashraf @HeshamASH Fecha: 10 de junio de 2026 Gravedad: Alta CVSSv3.1: 7.3, CVSSv4: 7.0 CWE: CWE-78 — Neutralización Incorrecta de Elementos Especiales utilizados en un Comando del SO Inyecci...