↓Skip to main content
  1. Posts/

[ RESEARCH ] - CVE overview

·47 words·1 min·
RESEARCH CVE OVERVIEW
Author
Table of Contents

Summary
#

An overview of discovered Common Vulnerabilities and Exposures (CVEs), through security research by HEKK.ONE, that are currently available for public disclosure.

2026
#

Silverpeas
#

[+] CVE-2026-78738 - Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Document management file upload feature.

Related

[ RESEARCH ] - CVE-2026-78738 - Stored XSS Silverpeas Core 6.4.6 - File upload feature
·384 words·2 mins
RESEARCH CVE-2026-78738 SILVERPEAS
Stored XSS in Silverpeas Document Management. By modifying the X-FULL-PATH header during file upload with an XSS payload, the payload executes when the file’s preview button is clicked.
OFFSEC - Proving Grounds - FLINK
·1835 words·9 mins
OFFSEC PG PRACTICE APACHE FLINK MSFCONSOLE PACK2THEROOT CVE-2026-41651
Apache Flink 2.0.0 on port 8081 is exploited via Metasploit’s JAR Upload RCE module for initial access. LinPEAS identifies Pack2TheRoot (CVE-2026-41651), enabling privilege escalation to root.
OFFSEC - Proving Grounds - CARRYOVER
·3043 words·15 mins
OFFSEC PG PRACTICE SQLMAP LD_PRELOAD
Carvilla on port 80 is vulnerable to SQL injection, providing initial access via SQLmap. An exposed LD_PRELOAD variable enables a custom shared object to be executed with sudo, escalating privileges to root.
OFFSEC - Proving Grounds - ZAB
·1473 words·7 mins
OFFSEC PG PRACTICE MAGE PACK2THEROOT CVE-2026-41651
Gobuster finds local.txt on port 80. A Mage web app on port 6789 provides browser-based terminal access. The server is vulnerable to Pack2TheRoot (CVE-2026-41651), enabling privilege escalation to root.
OFFSEC - Proving Grounds - GLIDER
·1919 words·10 mins
OFFSEC PG PRACTICE XXE PHP FILTER PSPY MQTT
XXE on port 80 enables PHP file reads and RCE. After gaining access, pspy64 reveals Mosquitto credentials; subscribing to the MQTT topic exposes root credentials.
OFFSEC - Proving Grounds - BACKUPBUDDY
·1608 words·8 mins
OFFSEC PG PRACTICE PATH TRAVERSAL SSH2JOHN JOHN PACK2THEROOT CVE-2026-41651
PHP File Manager on port 80 allows default login and path traversal to Brian’s SSH key. SSH access is gained, then CVE-2026-41651 is exploited to become root.