271555 matches found
The vulnerability of the dependency manager for PHP Composer, related to the failure to remove special elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the dependency manager for PHP Composer is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2026-86754
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...
PT-2026-86753
Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...
PT-2026-86760
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...
The vulnerability of the application software interface of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B allows a hacker to execute arbitrary code.
The vulnerability of the application software interface of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism...
TencentOS Server 4: gstreamer1-plugins-good (TSSA-2026:0973)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0973 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-48593
CVE-2025-48593: Zero-Click Remote Code Execution in Android System Author: LAKSHMIKANTHAN K letchupkt Date: November 2025 Severity: Critical A critical zero-click remote code execution vulnerability affecting Android 13-16 devices. Vulnerability Overview Attribute| Details ---|--- CVE ID|...
CVE-2025-53770
CVE-2025-53770 Este es un escĆ”ner para la vulnerabilidad de ejecuciĆ³n remota de cĆ³digo no autenticada en SharePoint, a la que se le asignĆ³ el nĆŗmero de CVE CVE-2025-53770. El cĆ³digo fue escrito mediante ingenierĆa inversa de un payload visto en estado salvaje. Ćsalo bajo tu propio riesgo; no soy...
CVE-2026-33454
InyecciĆ³n de Cabeceras en camel-mail ā ReproducciĆ³n de Vulnerabilidad RCE CVE-2026-33454 Este proyecto demuestra una vulnerabilidad de inyecciĆ³n de cabeceras de mensaje Camel en el componente camel-mail de Apache Camel, rastreada como CVE-2026-33454. Un atacante que pueda enviar un correo...
CVE-2026-4480
šØ CVE-2026-4480 - EjecuciĆ³n Remota de CĆ³digo CrĆtica en el Subsistema de ImpresiĆ³n de Samba EjecuciĆ³n Remota de CĆ³digo RCE Vulnerabilidad de InyecciĆ³n de Comandos de ImpresiĆ³n en Samba "Un nombre de trabajo de impresiĆ³n nunca deberĆa convertirse en un comando de shell." š Resumen CVE-2026-4480 es...
CVE-2021-44228_Log4Shell
Demo de explotaciĆ³n de la vulnerabilidad Log4Shell CVE-2021-44228 Este proyecto simula un escenario de ataque RCE a travĆ©s de la vulnerabilidad Log4Shell en la librerĆa Apache Log4j 2. Componentes 1. vulnerable-app : AplicaciĆ³n Spring Boot que utiliza Log4j 2.14.1. 2. attacker : Contiene un...
magento2-session-reaper-patch
Parche de Session Reaper para Magento 2 para CVE-2025-54236 Parche para CVE-2025-54236 tambiĆ©n conocido como Session Reaper que permite la apropiaciĆ³n de cuentas de clientes y RCE bajo ciertas condiciones. Este parche es en realidad una extensiĆ³n de Magento 2 y es universalmente compatible con...
Samba-CVE-2007-2447-Exploit-Username-Map-Script
Samba CVE-2007-2447 Exploit Username Map Script Este repositorio contiene un script de Python diseƱado para automatizar la explotaciĆ³n de la vulnerabilidad CVE-2007-2447 en servidores Samba versiones 3.0.20 a 3.0.25rc3. Esta herramienta ha sido desarrollada con fines exclusivamente educativos y...
Adobe ColdFusion - Pre-Auth Remote Code Execution
Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...
ConnectWise ScreenConnect <= 23.9.7 - Path Traversal
ConnectWise ScreenConnect 23.9.7 and prior contain a path traversal caused by improper handling of user input, letting attackers execute remote code or access confidential data, exploit requires network access. id: CVE-2024-1708 info: name: ConnectWise ScreenConnect = 23.9.7 - Path Traversal...
Langflow AI - Unauthenticated Remote Code Execution
Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint.A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. id: CVE-2025-3248 info: name: Langflow AI - Unauthenticated Remote Code Execution author: nvn172...
Roundcube Webmail - Remote Code Execution
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...
Apache OFBiz - Remote Code Execution
Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45195 info: name: Apache OFBiz -...
Apache ActiveMQ - Remote Code Execution
Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...
CraftCMS - Remote Code Execution
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity...