CVE-2026-80131

Dell Secure Connect Gateway 5.0 (SCG 5.0) contains a Path Traversal vulnerability (CWE-22) affecting both the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). An unauthenticated attacker with remote network access can potentially exploit this flaw to achi...

CVE-2026-80131

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

EUVD-2026-72406

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2022-39073

CVE-2022-39073 Detalles del firmware: root@kitploit: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Requisitos previos requests pip install requests Inyección de comandos La vulnerabilidad es una inyección de comandos compartida entre el binario ztenetlinkdetect ...

CVE-2023-51385

CVE-2023-51385 RCE en ProxyCommand de OpenSSH 1. Cuando tu ProxyCommand esté configurado de la siguiente manera: root@kitploit: Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. Usa el siguiente comando como prueba de concepto root@kitploit: git clone...

CVE-2026-80129

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain a Path Traversal vulnerability (Improper Limitation of a Pathname to a Restricted Directory). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated attacker with remote a...

EUVD-2026-72404

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2024-21633

Ejecución remota de código en MobSF a través de CVE-2024-21633 He encontrado una escritura arbitraria de archivos en apktool y la reporté a través del aviso de seguridad de GitHub. Sabía que muchos proyectos dependían de apktool, pero tras la publicación del aviso y la corrección, no pareció que...

Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

Apache Superset pickle 库代码执行 IBM : Apache Superset 可能允许远程攻击者在系统上执行任意代码，原因是使用了 pickle 库中的不安全 load 方法来反序列化数据。通过发送特制请求，攻击者可以利用此漏洞在系统上执行任意代码。 参考 : https://github.com/apache/incubator-superset/pull/4243 https://nvd.nist.gov/vuln/detail/CVE-2018-8021...

CVE-2020-11978

CVE-2020-11978: Remote code execution in Apache Airflow's Example DAGs Information Description: This vulnerability allows RCE when Airflow's example DAGs are loaded, potentially unauthenticated with CVE-2020-13927 CVE Credit : xuxiang of DtDream security Versions Affected:...

CVE-2024-27956

Wordpress SQLI-2-RCE Exploit Este script de Python explota CVE-2024-27956, una vulnerabilidad en Wordpress que permite inyección SQL que lleva a ejecución remota de código RCE. Características Explotación multi-hilo: Utiliza hilos concurrentes para explotar múltiples instancias de Wordpress...

CVE-2019-16278

CVE-2019-16278 Script simple en Python para explotar CVE-2019-16278 debido a una vulnerabilidad de path traversal que permite RCE no autenticado. Uso: python3 nostroSploit.py targetIP targetPort comando opcional a ejecutar Inspirado por:...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Ejecución Remota de Código RCE CVE-2021-4045 🔐 "PWNTAPO: Revelando Inyección de Comandos en Cámaras TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 Lee sobre el exploit en exploit db Se trata de una vulnerabilidad de inyección de comandos que afecta a todas las versiones de...

CVE-2026-86426

LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...

CVE-2026-80133

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-61409

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...

CVE-2026-61410

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerabili...

CVE-2023-27524

CVE-2023-27524 Apache Superset 认证绕过 CVE-2023-27524 参考 https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524 https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a script to exploit CVE-2017-5638 - It allows an attacker to inject OS commands into a web application through the content-type header Apache Struts 2 is an open-source web application framework for developing Java EE web applications. It...

FortiWeb-CVE-2025-52970-Authentication-Bypass

🚨 FortiWeb Authentication Bypass → Remote Code Execution 📌 Overview This repository demonstrates an authentication bypass in FortiWeb that can be chained to achieve Remote Code Execution RCE. The exploit leverages a vulnerable endpoint to inject SQL payloads, upload a webshell, and execute comman...