CVE-2026-86590

In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...

CVE-2026-34197

CVE-2026-34197 - Apache ActiveMQ Jolokia: Ejecución Remota de Código RCE CVE-2026-34197 es una vulnerabilidad de ejecución remota de código RCE de alta severidad que afecta a Apache ActiveMQ Classic. El problema se encuentra dentro del puente Jolokia JMX-HTTP, que expone operaciones de gestión a...

CVE-2019-14224

CVE-2019-14224: Authenticated Remote Code Execution in Alfresco Community By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution. The attacker must use Alfresco to: Upload malicious Solr...

CVE-2021-31630

CVE-2021-31630 OpenPLC 3 WebServer Ejecución Remota de Código Autenticada. Descripción La presencia de Inyección de Comandos en Open PLC Webserver v3 permite a atacantes remotos ejecutar código arbitrario. Solo probado en la máquina HTB Wifinetictwo.htb. Encontré problemas con todos los scripts q...

CVE-2018-14714-RCE-exploit

CVE-2018-14714 PoC de RCE Vulnerabilidad RCE en routers WiFi ASUS Este PoC es solo con fines de aprendizaje e investigación. No lo utilices para actividades ilegales; eres el único responsable de cualquier consecuencia legal. Esta es una prueba realizada después de modificaciones de código basada...

CVE-2026-76968 Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...

CVE-2026-76963 Missing Authorization Check in Application Server ABAP of SAP NetWeaver and ABAP Platform

Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...

cve-2025-11142-axis-mediaclip-rce

CVE-2025-11142 — AXIS mediaclip.cgi OS Command Injection n-day research writeup & PoC — post-patch technical analysis of a CVSS 7.1 OS command injection vulnerability in the AXIS VAPIX Media Clip API, independently rediscovered and verified through black-box testing against an Axis device. Axis's...

CVE-2019-5475-EXP

CVE-2019-5475-EXP CVE-2019-5475-EXP 【Vulnerabilidad de ejecución remota de comandos en Nexus Repository Manager 2.x】 Nombre de la vulnerabilidad: Vulnerabilidad de ejecución remota de comandos en Nexus Repository Manager 2.x Descripción de la vulnerabilidad: Nexus Repository Manager 2.X presenta...

CVE-2023-34468

CVE-2023-34468: Ejecución Remota de Código a través de Componentes de BD en Apache NiFi Los Servicios de Controlador DBCPConnectionPool y HikariCPConnectionPool en Apache NiFi 0.0.2 hasta 1.21.0 permiten que un usuario autenticado y autorizado configure una URL de Base de Datos con el controlador...

CVE-2022-30023

CVE-2022-30023 Tenda HG9 路由器上的已认证命令注入 用法 root@kitploit: git clone https://github.com/Haniwa0x01/CVE-2022-30023 cd CVE-2022-30023 python exploit.py -u http://target -U "user" -P "password" 示例 root@kitploit: pc@pc-note:/CVE-2022-30023/$ python3 exploit.py -u "http://10.0.0.1" -U "admin" -P "admin" ...

CVE-2022-51015

PocketMine-MP before 4.0.6 fails to validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK actions) and in UseItemTransactionData (typically within InventoryTransactionPacket). A remote authenticated attacker can send crafted packets with invalid facing values (e.g., negati...

CVE-2023-20273

CVE-2023-20273 PoC del exploit CVE-2023-20273 Uso root@kitploit: usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h,...

CVE-2026-53786

A flaw was found in rsync. This vulnerability allows authenticated clients to bypass module-level filter restrictions. By supplying malicious merge file directives, an attacker can inject rules that override the daemon's intended file exclusion policies. This leads to information disclosure, as...

CVE-2025-55886

CVE-2025-55886 Descripción Se descubrió una vulnerabilidad de Referencia Directa Insegura a Objetos IDOR en ARD. La falla existe en el parámetro feuid del endpoint de la API del historial de pagos. Un atacante autenticado puede manipular este parámetro para acceder al historial de pagos de otros...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Resumen Una vulnerabilidad en Trisolutions BRPerfX versión 1.4.4.0 expone las credenciales LDAP en texto plano dentro de la interfaz de configuración administrativa. Un administrador autenticado puede inspeccionar el código del lado del cliente utilizando las...

WordPress WP Fusion (Pro) plugin <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter vulnerability

Authenticated Subscriber+ Privilege Escalation via ThriveCart Auto Login 'role' Parameter vulnerability discovered by Jarno Vos jarnovos in WordPress Plugin WP Fusion Pro versions = 3.47.13...

Linux Distros Unpatched Vulnerability : CVE-2026-18709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared...

CVE-2026-86122

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network...

CVE-2026-86112

BookWyrm through version 0.9.1 contains an authorization flaw in its Favorite and Unfavorite views (located in interaction.py). The endpoint fails to validate user visibility permissions, allowing authenticated attackers to POST a status ID to the favorite endpoint and create unauthorized interac...