CVE-2026-75992 Illustrator | Out-of-bounds Write (CWE-787)

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

internet-of-vulnerable-things

脆弱なモノのインターネット 脆弱なモノのインターネット をテーマにした私の小さなタームペーパーの成果です。 概要...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access および Identity Manager における SSTI を介した RCE。 CVE-2022-22954 - PoC SSTI 使い方: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fi...

CVE-2021-40870

CVE-2021-40870 Aviatrixは、認証されたユーザーが任意のコードを実行することを許可します。...

CVE-2021-22893

CVE-2021-22893 Pulse Secure CVE-2021-22893를 악용하기 위한 개념 증명PoC 스크립트입니다. 사용법 Pulse Secure VPN에서 RCE를 실행합니다. root@kitploit: chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE 이 저장소는 Adobe ColdFusion 2021의 RCE 취약점에 대한 익스플로잇 코드를 포함하고 있습니다. 익스플로잇 설명 익스플로잇은 /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm으로 JSP 리버스 셸을 포함한 POST 요청을 보냅니다. 성공하면 셸을 /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/uploadedFiles/shell.jsp...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise 是一个拖放式用户界面，用于构建自定义的大语言模型流程。在 3.0.5 版本中，Flowise 存在远程代码执行漏洞。CustomMCP 节点允许用户输入用于连接外部 MCP 服务器的配置设置。该节点解析用户提供的 mcpServerConfig 字符串以构建 MCP 服务器配置。然而，在此过程中，它会在没有任何安全验证的情况下执行 JavaScript 代码。具体来说，在 convertToValidJSONString 函数内部，用户输入被直接传递给 Function 构造函数，该构造函数会将输入作为 JavaScript...

Rocket.Chat-Automated-Account-Takeover-RCE-CVE-2021-22911

Rocket.Chat 자동화된 비인증 계정 탈취를 통한 RCE CVE-2021-22911 Rocket.Chat 3.12.1 CVE-2021-22911에 대한 완전한 비인증 RCE 개념 증명PoC입니다. 원본 PoC는 Enox가 제작했습니다. 현재 이 PoC는 2FA가 없는 계정에서만 작동합니다. 곧 2FA 우회 기능도 추가할 예정입니다. optional 제작 optional의 트위터...

CVE-2022-26809-RCE

CVE-2022-26809-RCE CVE-2022-26809-RCE https://satoshidisk.com/pay/CFGspB...

CVE-2026-85384

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...

CVE-2026-82004

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary...

CVE-2026-79721

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

CVE-2026-66302

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...

CVE-2026-49919

In ttfacecolrblendlayer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49881

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49879

In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49882

In rwmfchandlereadop of rwmfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28662

In p2pprocessprovdiscbootstrapreq of p2ppd.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28609

In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28618

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...