PHP_CVE-2012-1823

PHP-CGI Remote Code Execution Vulnerability CVE-2012-1823 Principle Reference article http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Affected versions: php Vulnerability Analysis PHP SAPI and Operation Modes First, let's introduce the operation modes of PHP. Download the PHP source...

Malicious code in py-wormgpt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...

MAL-2026-17886 Malicious code in py-wormgpt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...

CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 dos redis. Rce not finished yet...

cve-2022-37298

CVE-2022-37298: RCE in Shinken Monitoring Versions affected: 2.4.3 Disclosure link: https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2 CVE link: https://vulners.com/cve/CVE-2022-37298 Description The SafeUnpickler class found in shinken/safepickle.py implements a...

CVE-2019-0708-Msf--

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — ClearML Pickle Artifact RCE Overview Field| Details ---|--- CVE| CVE-2024-24590 Software| ClearML Affected Versions| 0.17.0 – 1.14.2 Vulnerability| Unsafe pickle deserialization of task artifacts Authentication| Requires write access to a ClearML project Impact| Remote Code...

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

CVE-2023-4542

poc The D-LINK-DAR-8000-10 Online behavior audit gateway has rce vulnerabilities official website:http://www.dlink.com.cn/ version:D-LINK DAR-8000-10 See the login page. Construct url:...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...

cve-2020-8165-demo

CVE-2020-8165 Demo Yet another demo of CVE-2020-8165, though in a more realistic implementation than most. Background CVE-2020-8165 A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

CVE-2024-24590

CVE-2024-24590 Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with. Usage 1. paste the credentials given and run...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...

CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack-based buffer overflow vulnerability exists in the depackpha function of libxmp, a library for module music playback. The vulnerability is triggered when parsing malformed Pha Packer PHA module files. Improper bounds checking on a local...

CVE-2025-1974

Kubernetes Ingress-NGINX Unauthenticated Remote Code Execution CVE-2025-1974 Ingress-NGINX: An ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer The "IngressNightmare" vulnerability CVE-2025-1974 stems from a critical flaw in the Ingress-NGINX Admission Controller...

CVE-2026-3854-lab

Flagship Lab 001: From Git Push Options to RCE A local Learning Lab and Research Lab inspired by the publicly documented vulnerability concepts behind CVE-2026-3854. Both experiences use real authenticated Git pushes against ForgeDock, a fictional Git server; the Research Lab. !CAUTION This proje...

CVE-2020-13957

Apache Solr RCE CVE-2020-13957 Docker Demo Mac Demo NVD CVE-2020-13957 Description NVD CVE-2020-13957 Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous which could be used for remote code execution to be configured in a ConfigSet...

CVE-2020-1350

Warning This repository has been archived and is no longer actively maintained. CVE-2020-1350 This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service. Supported OS for this workaround script Windows Server 2012...