TP-Link - OS Command Injection

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a specially crafted payload in an IP address input field. id: CVE-2021-41653 info: name: TP-Link - OS Command Injection author: gy741 severity: critical...

DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution

DedeCMS 5.7SP2 is susceptible to cross-site request forgery with a corresponding impact of arbitrary code execution because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code. id: CVE-2018-7700 info: name: DedeCMS 5.7SP2 - Cross-Site...

pgAdmin < 6.17 - Unauthenticated Remote Code Execution

pgAdmin prior to 6.17 contains an insecure HTTP API caused by improper access control, letting unauthenticated users execute arbitrary external utilities via path manipulation, exploit requires no authentication. id: CVE-2022-4223 info: name: pgAdmin 6.17 - Unauthenticated Remote Code Execution...

LiteLLM - Command Injection

A critical unauthenticated remote code execution vulnerability exists in LiteLLM due to improper input handling in the MCP stdio test endpoint. An attacker can send a specially crafted request to the /mcp-rest/test/connection endpoint with controlled parameters, resulting in arbitrary command...

Micro Focus UCMDB - Remote Code Execution

Micro Focus UCMDB is susceptible to remote code execution. Impacted products include Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions, and Operations Bridge containerized 2020.05, 2019.08, 2019.0...

Apache Tomcat Path Equivalence - Remote Code Execution

Path Equivalence- 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. id: CVE-2025-24813 info: name: Apache Tomcat Path Equivalence - Remote Code Execution...

CVE-2026-29041

CVE-2026-29041 — RCE authentifiée via téléchargement de fichier sans restriction dans Chamilo LMS 1.11.32 -yellow?style=for-the-badge Exécution de code à distance authentifiée dans Chamilo LMS 1.11.32 via une validation inadéquate du téléchargement de fichiers dans le point de terminaison AJAX...

CVE-2026-33229

CVE-2026-33229 — RCE dans XWiki via contournement du sandbox Apache Velocity Une vulnérabilité d'exécution de code à distance dans XWiki Platform qui permet à un utilisateur authentifié disposant des permissions de script de contourner entièrement le sandbox Apache Velocity — sans nécessiter de...

CVE-2025-49844-Vulnerability-Scanner

ماسح الثغرة الأمنية CVE-2025-49844 RediShell أداة شاملة لفحص خوادم Redis بحثًا عن الثغرة الأمنية الحرجة CVE-2025-49844 RediShell. حول الثغرة الأمنية معرف CVE : CVE-2025-49844 الاسم : RediShell درجة CVSS : 10.0 حرجة النوع : استخدام بعد التحرير UAF في مترجم Lua التأثير : تنفيذ التعليمات البرمجية عن...

CVE-2026-20180

Cisco ISE RCE: تحليل متقدم للاستغلال والمعالجة 📋 جدول المحتويات 1. الملخص التنفيذي 2. تحليل سطح الهجوم 3. نواقل الاستغلال 4. تقنيات التهرب المتقدمة 5. التأثير النظامي على بنى Zero Trust 6. استراتيجية المعالجة 7. التحقيق الجنائي الرقمي 8. المراجع 🎯 الملخص التنفيذي تمثل ثغرات تنفيذ الأوامر عن بُعد...

CVE-2026-22812

CVE-2026-22812 نظرة عامة أداة استغلال بلغة Python لثغرة تنفيذ الأوامر عن بُعد RCE في OpenCode والتي تؤثر على الإصدارات الأقدم من v1.0.216. توفر هذه الأداة نواقل هجوم متعددة تشمل تنفيذ الأوامر، قراءة/كتابة الملفات، رفع/تنزيل الملفات، وقشرة تفاعلية. إخلاء مسؤولية ⚠️ للاستخدام المصرح به فقط ⚠️ هذه...

CVE-2026-25253-research

Preuve de concept CVE-2026-25253 Exécution de code à distance RCE en un clic sur OpenClaw via détournement de WebSocket inter-site Cross-Site WebSocket Hijacking. AVERTISSEMENT : Ce code est fourni uniquement à des fins de recherche en sécurité autorisée et à des fins éducatives. L'utilisation de...

springshell-rce-poc

CVE-2022-22965 - कमजोर ऐप और PoC परीक्षण और त्रुटि root@kitploit: $ docker rm -f rce; docker build -t rce:latest . && docker run -d -p 8080:8080 --name rce rce:latest && sleep 5 && python poc.py आउटपुट उदाहरण root@kitploit: rce sha256:f626a2190dc0790c610afd4f12a4b2482b6a726d671fdac1432275de89c07c...

CVE-2019-19609

CVE-2019-19609 Strapi تنفيذ التعليمات البرمجية عن بعد الاستخدام python3 exploit.py rhost jwt url lhost إثبات المفهوم للاستغلال https://bittherapy.net/post/strapi-framework-remote-code-execution/...

ciscoasa_honeypot

Cisco ASA हनीपॉट Cymmetria Research, 2018. https://www.cymmetria.com/ संपर्क: [email protected] Cisco ASA घटक के लिए एक निम्न-संवाद हनीपॉट जो CVE-2018-0101, एक DoS और रिमोट कोड निष्पादन भेद्यता का पता लगाने में सक्षम है यह समुदाय के उपयोग के लिए MIT लाइसेंस के तहत जारी किया गया है। उपयोग...

CVE-2026-78657

The SigmaForms Pro – AI Generated Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesubmissionfiles function in all versions up to, and including, 1.4.11. This makes it possible for unauthenticated attackers to delete arbitra...

CVE-2026-19116

The User Frontend WordPress plugin before 4.3.11 does not prevent user-supplied field values from being deserialized when a submitted post is reopened in its frontend editing form, allowing authenticated users with subscriber-level access and above to perform PHP Object Injection, which may lead ...

CVE-2026-14357

The DevKit Pro plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.3.0. This is due to a missing capability check and missing nonce validation in the DPDEVinstallthemesfunc function registered on the wpajaxDPDEVinstallthemes action. This makes it possib...

CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution

POC रिपॉजिटरी: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 विवरण इस रिपॉजिटरी में CVE-2019-16278 के लिए एक Python एक्सप्लॉइट है, जो Nostromo 1.9.6 एक वेब सर्वर में एक कमजोरी है। यह कमजोरी डायरेक्टरी ट्रैवर्सल का फायदा उठाकर लक्ष्य प्रणाली पर मनमाने कमा...

weblogic_honeypot

वेबलॉजिक हनीपॉट Cymmetria Research, 2018. https://www.cymmetria.com/ द्वारा लिखित: Omer Cohen @omercnet विशेष धन्यवाद: Imri Goldberg @lorgandon, Itamar Sher, Nadav Lev संपर्क: [email protected] वेबलॉजिक हनीपॉट एक कम-इंटरैक्शन हनीपॉट है जो Oracle Fusion Middleware के Oracle WebLogic Server घट...