333860 matches found
Ajenti has potential Remote Code Execution
Impact An unauthenticated user could gain access to a server to execute arbitrary code on this server. Patches This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible...
checkmk_php2shell
checkmkphp2shell A Checkmk extension that shows, for every PHP installation on a Linux host, whether it is affected by PHP2Shell - the pre-authentication remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 , disclosed and fixed on 2026-10-21 in PHP 8.2.35, 8.3.36, 8.4.27 and...
CVE-2026-41089-Netlogon-RCE
🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...
CVE-2025-7769
CVE-2025-7769 – Remote Command Injection in mobileapi Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE‑2025‑7769 , a critical remote Command Injection vulnerability found in Tigo Energy CCA appliances exposing the /cgi-bin/mobileapi endpoint. The vulnerability is...
CVE-2018-11235
CVE-2018-11235 RCE vulnerability to exec "git clone --recurse-submodule" CVE-2018-11235...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-scanner Exposure triage, host verification and reme...
CVE-2025-25257
CVE-2025-25257 Exploits for CVE-2025-25257 released by watchtowr and others I found on github did not work on my installations of fortiweb downloaded from the official vendor website. I ripped some of these exploit codes to make a poc capable to pop a reverse shell on my environment. IP address a...
CVE-2026-41089-Detector
CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...
CVE-2018-7600
CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...
CVE-2024-21762-Checker
CVE-2024-21762-Checker This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses. For more information, see this Bishop...
dotnet9.0: dotnet10.0: dotnet8.0: dotnet: ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
chromium-browser: angle: chromium-browser: Arbitrary Code Execution via out-of-bounds write in ANGLE
A flaw was found in chromium-browser. An out-of-bounds write vulnerability in ANGLE, a component used for graphics rendering, could allow a remote attacker to execute malicious code. This vulnerability can be exploited by tricking a user into visiting a specially crafted web page. Successful...
chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page
A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...
chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE
A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the...
chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page
A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...
ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability
A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...
chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page
A flaw was found in the ANGLE component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...
CVE-2022-22954
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...