631948 matches found
CVE-2026-90277
A flaw was found in the Linux kernel's md/md-llbitmap component. This vulnerability occurs when a bitmap creation fails, leading to a Use-After-Free UAF condition where the system might attempt to access memory that has already been released. A local attacker could potentially exploit this flaw t...
CVE-2026-84659
A flaw was found in the Jenkins Script Security Plugin. This vulnerability allows an attacker to bypass security restrictions by disabling the global script sandbox. By exploiting a missing permission check through Stapler data binding, an attacker can execute arbitrary code, potentially...
php-cgi-cve-2024-4577
php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...
CVE-2024-28515
CVE-2024-28515 Description Buffer Overflow vulnerability in CSAPPLab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component. Additional Information CNVD has completed verification of this vulnerability, but it has not...
Log4shell
Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...
cve-2023-34960
cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...
CVE-2018-7600.
IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...
CVE-2022-27925-Revshell
Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925 / / / / / / / / / / / / / // / / / / / / // / / / // / //// // //.// ,/ CVE-2022-27925 usage: exp.py -h -t TARGET -m MASS -l LHOST -p LPORT options: -h, --help show this help message and exit -t TARGET, --target TARGET URl with...
CVE-2019-19781
This article is about CVE-2019-19781, a Remote Code Execution RCE vulnerability due to Directory Traversal in Citrix ADC and Gateway. This remote code execution vulnerability occurs because the validation of the smb.conf file under the /vpn path's ../vpns is not properly performed. Steals system...
CVE-2025-55182
CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...
SSH-key-and-RCE-PoC-for-CVE-2021-41773
SSH Key and RCE PoC for CVE-2021-41773 This repository contains a Proof-of-Concept PoC for CVE-2021-41773. This CVE exposes a Local File Inclusion LFI and Remote Code Execution RCE vulnerability. Installation Ensure you have Go version 1.23.0 installed. Build the exploit binary with the following...
spring-shell-vuln
spring-shell-vuln Spring4Shell: Spring core RCE vulnerability Spring has Confirmed the RCE in Spring Framework. The team has just published the statement along with the mitigation guides for the issue. Now, this vulnerability can be tracked as CVE-2022-22965. Some information about the Spring4She...
CVE-2025-55182
React2Shell CVE-2025-55182 - Proof of Concept A comprehensive proof-of-concept exploit and educational resource for CVE-2025-55182, a critical remote code execution vulnerability affecting React Server Components with a CVSS score of 10.0. Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED TESTING...
CVE-2023-22527
CVE-2023-22527 - Atlassian Confluence Remote Code Execution Overview CVE-2023-22527 is a critical remote code execution vulnerability in Atlassian Confluence Data Center and Server. This vulnerability allows unauthenticated attackers to execute arbitrary code on vulnerable Confluence instances...
React2Shell-Library
React2Shell Library A curated list of resources regarding CVE-2025-55182 , the critical Remote Code Execution RCE vulnerability in React Server Components known as "React2Shell". Objective: To document the history, mechanics, and remediation of the React2Shell vulnerability for researchers and...
cve-2021-31630
cve-2021-31630 OpenPLC WebServer v3 - Authenticated RCE This PoC script is based on the exploit provided by Fellipe Oliveira. Features : Directly uploads C code to /hardware instead of st file upload Restores default program before uploading reverse shell Improved C based reverse shell which is n...
CVE-2023-4169_CVE-2023-3306_CVE-2023-4415
Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G backend remote code execution vulnerability CVE-2023-3306 2. CVE-2023-4169 unauthorized arbitrary password modification CVE-2023-4169 3. Ruijie RG-EW1200G login bypass CVE-2023-4415 Attention I developed a tool for local...
CVE-2025-55182
CVE-2025-55182 React2Shell CVE-2025-55182 React RCE Test Program 🔒 CVE-2025-55182 Interactive RCE Scanner This script is a vulnerability verification tool targeting CVE-2025-55182, a critical remote code execution RCE vulnerability in React 19.x's React Server Components RSC . This tool determine...
CVE-2025-55182-Proof-of-Concept
CVE-2025-55182 Proof-of-Concept This repository contains a Proof-of-Concept PoC for CVE-2025-55182 , a vulnerability involving Prototype Pollution leading to Remote Code Execution RCE in certain server‑side rendering implementations. ⚠️ Warning: This PoC is strictly for educational, research, and...