PT-2026-139005

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A path traversal issue allows a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative...

EulerOS Virtualization 2.15.1 : edk2 (EulerOS-SA-2026-4584)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...

PT-2026-138993

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A remote authenticated attacker can execute arbitrary code because the system does not properly control the modification of obje...

Linux Distros Unpatched Vulnerability : CVE-2026-123095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdlhook script that allows remote attackers to add unchecked entries by...

PT-2026-139092

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A path traversal flaw allows a remote attacker to execute arbitrary code without requiring authentication. Path traversal is a technique used to access files and directories that a...

Linux Distros Unpatched Vulnerability : CVE-2026-90436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a...

Linux Distros Unpatched Vulnerability : CVE-2026-114134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with usepyproject: true accepts tool.black.required-version from...

EulerOS Virtualization 2.15.1 : samba (EulerOS-SA-2026-4794)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto- enrollment is enabled, Samba m...

EulerOS Virtualization 2.15.0 : perl-IO-Compress (EulerOS-SA-2026-4840)

According to the versions of the perl-IO-Compress package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled outp...

VulnCheck KEV: CVE-2026-123751

The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or type of uploaded files, making it possible for unauthenticated attackers to write arbitrary files to the server and achieve remote code execution. This...

PT-2026-139481

Name of the Vulnerable Software and Affected Versions Tenda AC19 version 16.03.10.07 Description A heap-based buffer overflow occurs in the saveParentControlInfo function within the /goform/saveParentControlInfo endpoint. This issue is triggered by the manipulation of the deviceId argument,...

PT-2026-139143

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Remote authenticated attackers can execute arbitrary code on the server due to insufficient validation of uploaded content. The...

PT-2026-139480

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the client management component occurs when a client is created or imported with authorization services enabled. The system fails to clear an internal session attribute used during...

PT-2026-139152

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Improper neutralization of special elements in an OS command allows a remote attacker to execute arbitrary code without requirin...

PT-2026-139094

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Remote authenticated attackers can execute arbitrary code due to improper control of code generation. This allows authenticated...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

CVE-2024-36401-GeoServer-RCE

RCE vulnerability in GeoServer CVE-2024-36401 - detection script CVE-2024-36401 is a critical security vulnerability affecting GeoServer, an open-source server for sharing geospatial data, and GeoTools, an open-source Java library that provides tools for geospatial data. The vulnerability,...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 Check Overview This template is designed to check the presence of the SAP NetWeaver CVE-2025-31324 vulnerability. This vulnerability allows unauthorized users to upload JSP files through the /developmentserver/metadatauploader endpoint, which can lead to potential remote code...