632205 matches found
CVE-2020-10257
/ \ \ / / || \ \ / |/ \ | | | \ V /| |/ / / / || | / /| \ / / | / || /// ||/|/// by darkcast CVE-2020-10257: WordPress TRX Addons Plugin Unauthenticated Remote Code Execution RCE Vulnerability Affected Plugin: TRX Addons Vulnerability Type: Unauthenticated Remote Code Execution RCE CVSS Score:...
CVE-2023-25202
CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...
CVE-2021-22053
CVE-2021-22053 CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the...
CVE-2026-92982
A Jinja2 template injection vulnerability exists in Ansible Operator Plugins . A low-privileged Kubernetes user can exploit this by crafting malicious custom resource (CR) specification values that lack proper sanitization. When processed by Ansible, these values allow embedded Jinja2 expressions...
EUVD-2026-102157
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982 Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
CVE-2026-92982
A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource CR specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressio...
log4j-log4shell-affected
log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...
CVE-2020-10204
CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...
RCity-CVE-2024-27198
RCity - CVE-2024-27198 RCE & Admin Account Creation & CVE-2024-27199 Auth Bypass Exploiting CVE-2024-27198 & CVE-2024-27199 RCity is a Python script that interacts with a vulnerable TeamCity server. The CVE facilitates for unauthorised admin account creation, bypassing 403's on the domain. Whilst...
CVE-2026-66066-POC
PoC for CVE-2026-66066 - Minimal stock Rails/libvips lab This repository reproduces the Rails Active Storage file-read-to-RCE chain described by GHSA-xr9x-r78c-5hrm against Rails 8.1.3, the newest affected Rails 8.1 release. Rails 8.1.3.1 is the patched control. Use it only in the disposable loca...
CVE-2026-111094
JetBrains TeamCity versions before 2026.2 , 2026.1.4 , and 2025.11.8 are vulnerable to remote code execution (RCE) . The root cause is a whitelist bypass within the build messages protocol , which is categorized under CWE-502: Deserialization of Untrusted Data . Exploitation details and specific ...
EUVD-2026-102147
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible...
CVE-2026-111094
In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible...
CVE-2025-53772
CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...
CVE-2026-111091
In JetBrains Junie CLI versions prior to 26.8.3 , an attacker could achieve code execution by leveraging an untrusted project's MCP server configuration . This vulnerability is associated with CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The risk is rated as HIGH with a CVS...
CVE-2026-111091
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...
EUVD-2026-102144
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...
CVE-2023-51802
CVE-2023-51802 Simple Student Attendance System v.1.0 - Cross-site scripting XSS vulnerabilities in attendancereport Description : Cross Site Scripting vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the "page...