Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

CVE-2019-14222

CVE-2019-14222: Default Certificate in Alfresco Community Alfresco Community 5.x and below ships by default with a set of known private certificates. Anyone who downloads and installs the Alfresco Community software on a local machine gets access to these files. Once obtained, these private keys...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Under coordinated disclosure 90-day embargo Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-2035703 Severity: Critical CVSS 9.8 CWE: CWE-78 OS Command...

CVE-2026-108555

PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer.setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public IP can appear as a local device on self-hosted instances not behind...

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2024-34310

CVE-2024-34310 CVE-2024-34310 Suggested description Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter. Vulnerability Type SQL Injection Vendor of Product https://www.bjjfsd.com/ Affected Product Code Base Jin Fang times...

CVE-2026-108555

The PairDrop application (versions through 1.11.2 ) is vulnerable to an IP spoofing issue within the Peer._setIP function. This vulnerability stems from the software's reliance on the cf-connecting-ip header, which allows remote attackers to provide a forged header. If an attacker knows a victim'...

CVE-2024-22526

CVE-2024-22526 Vulnerability Overview CVE-2024-22526 Apr 12, 2024 BandiView Image Viewer Vulnerability Vulnerability Description advisories Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file. credit v7.0 update not...

CVE-2022-37208

37208 CVE-2022-37208 Suggested description JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

CVE-2024-25412

CVE-2024-25412 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field Vulnerability Type: Cross Site Scripting XSS Vendor of Product: https://github.com/flatpressblog/flatpress Affect...

CVE-2026-108546

Spotweb through version 1.5.8 is vulnerable to an OS command injection vulnerability within the runcommand NZB handler . The root cause is the unescaped substitution of shell metacharacters in a spot title for the $SPOTTITLE variable, which is subsequently passed to the exec() function. Remote at...

CVE-2026-108545

SillyTavern versions 1.12.13 through 1.19.0 are vulnerable to a pre-authentication Denial of Service (DoS) . The root cause is that body-parser middleware executes before authentication and whitelist checks, allowing unauthenticated remote attackers to submit large or compressed JSON or urlencode...

EUVD-2026-96340

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108546 Spotweb through 1.5.8 OS Command Injection via Spot Title in Runcommand Integration

Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicious titles. Attackers can post self-signed spots over Usenet with shell metacharacters in the title, which are...

CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

curveball-plus

curveball-plus simulation experiment of Curveball CVE-2020-0601 attacks under ECQV implicit certificates with Windows-like verifiers This file is constantly updated!...

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox Product before V-9.2.1 is Vulnerable to CSV macro injection. Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure encryption, and low total...

LeitWacht

GitLab Runner Leitwacht Control de salida de red para contenedores CI/CD de GitLab Runner. Leitwacht previene ataques a la cadena de suministro que exfiltran secretos, controlando lo que cada contenedor de trabajo puede acceder en la red. Cómo Funciona Leitwacht es un agente independiente que se...

EUVD-2026-96317

Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn,...