CVE-2024-4577-PHP-RCE

CVE 2024-4577 PHP Remote Code Execution automated scanner by Waived Affected versions: PHP 8.3, 8.3.8, 8.2. 8.2.20, 8.1., 8.1.29 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 https://www.exploit-db.com/exploits/52047 https://vulners.com/cve/CVE-2024-4577 Overview: This is a scanner that...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...

Exploit for CVE-2026-6516

cve-2026-6516-scanner.py...

CLEANSTART-2024-SZ97187 GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability...

CLEANSTART-2024-IP30957 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2024-GC14102 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2024-HD72386 GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gimp package. GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: go build cve-2026-19900-PoC.go ./cve-2026-19900-PoC -t...

AZL-112354 CVE-2026-84243 affecting package glibc 2.38-21

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-84243

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

DEBIAN-CVE-2026-84243

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-76012

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

CVE-2026-84243

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CLEANSTART-2025-SK82750 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36796 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-JG63575 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36794 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-MK28879 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36793 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CLEANSTART-2025-FK11078 Visual Studio Remote Code Execution Vulnerability

CVE-2023-36792 affects multiple packages. Visual Studio Remote Code Execution Vulnerability See references for individual vulnerability details...

CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

DEBIAN-CVE-2026-119777

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-115346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded files. This mak...