334288 matches found
actual-php2shell
actual-php2shell A reproducible, application-independent remo...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Universal Exploit for CVE-2026-109618 / CVE-2026-1...
php2shell-exploit
php2shell-exploit Universal PHP RCE exploit for CVE-2026-10...
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.55
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
EUVD-2026-108161
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
CVE-2026-102785 Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...
CVE-2026-102785
The YOOtheme Pro Joomla extension (versions 5.0.0-5.0.52 ) is vulnerable to unauthenticated remote code execution due to a flaw in its publicly accessible image transformation handler . The root cause is an incomplete binding of normalized image operations and output destinations to the request s...
Node2Shell: From Brotli Data to Remote Code Execution
Imperva Red Team demonstrated remote code execution against the official vulnerable Node.js build, then confirmed that the fixed release rejects the same Brotli input. Executive summary Node2Shell is Imperva Red Team's name for our analysis of CVE-2026-111497, a High severity flaw in Node.js's...
Exploit for Deserialization of Untrusted Data in Jetbrains Teamcity
CVE-2026-63077 — JetBrains TeamCity agent-polling deserializat...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell brief A static, dependency-free brief on the critic...
Exploit for CVE-2026-111497
CVE-2026-111497: Interim Mitigation for Azure Application Gate...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Detection Rules !PRs Welcomehttps://img.shields...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc — one-shot pre-auth RCE on stock PHP 8.4.26 Apa...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
💀 ZeroHack php2shell Lab & PoC Framework CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Vendor Watch A single-page, live dashboard of vendo...
CVE-2021-48014
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
CVE-2021-48014
FineReport 9.0 is affected by a path traversal vulnerability within the /WebReport/ReportServer design_save_svg operation. This flaw allows unauthenticated attackers to write arbitrary files by providing directory traversal sequences in the filePath parameter. By sending a POST request containing...
CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
EUVD-2021-34897
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...