CVE-2025-30054

The CGM CLININET software is vulnerable to local privilege escalation due to incorrect permission assignments (CWE-732). The service responsible for processing incoming HL7 messages runs with root privileges , but its configuration files and scripts are accessible and modifiable by the uhcapache ...

EUVD-2025-211184

CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts and configuration files can be modified by the uhcapache user. An attacker with uhcapache privileges can modify these...

EUVD-2025-211180

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an...

CVE-2025-30050

The CGM CLININET software is vulnerable to Code Injection in the RunCGI.pm component. The root cause is that the component dynamically imports modules based on a user-supplied query parameter, allowing an attacker from an adjacent network to execute arbitrary code with root privileges by providin...

EUVD-2025-211177

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes...

CVE-2025-30046

The CGM CLININET application server is vulnerable to Remote Code Execution (RCE) because multiple processes handling HL7 communication with external systems run with root privileges . These processes process untrusted data from external systems, allowing an attacker in an adjacent network to exec...

CVE-2025-30047

The CGM CLININET server is vulnerable to Remote Code Execution (RCE) due to the deserialization of untrusted data within an HTTP-based API used by the administrative module. An attacker located within the same local network can transmit a crafted serialized Java object to this API, leading to arb...

EUVD-2025-211178

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

CVE-2025-30045

The CGM CLININET software is vulnerable to a Code Injection flaw (CWE-94) within the ConvExpr function. This component processes Perl expressions to generate RTF document content; however, due to improper control of the evaluated code, an authenticated, high-privileged attacker can execute arbitr...

EUVD-2025-211176

CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to improper control of the code evaluated from these expressions, an authenticated, high-privileged attacker can cause arbitrary code to be executed with root...

log4j-test

Simple Example showing CVE-2021-44228 in action Explanation To reproduce this issue, I am removing the transitive dependency for logging from SpringBoot. Instead, I am bringing in spring-boot-starter-log4j2 spring-boot-starter-log4j2 brings in log4j-core which has the remote code exploit RCE...

CVE-2021-44228

CVE-2021-44228 Abuse Log4J CVE-2021-44228 to patch CVE-2021-44228 in vulnerable Minecraft game sessions to prevent exploitation in the session : A Journey From JNDI/LDAP Manipulation to Remote Code Execution Dream Land...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-10...

CVE-2024-40445_CVE-2024-40446

MimeTeX Vulnerability Reference CVE-2024-40445 & CVE-2024-40446 This repository serves as the public reference for the security issues CVE-2024-40445 and CVE-2024-40446 affecting MimeTeX, a lightweight open-source LaTeX renderer written in C. ⚠️ MimeTeX appears to be no longer actively maintained...

CVE-2025-3248

CVE-2025-3248 Langflow is a low-code platform primarily used for building and deploying AI agents and workflows. It simplifies the development process by providing a visual interface for creating complex AI applications, including chatbots, RAG Retrieval-Augmented Generation systems, and more...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Practical Exploitation Lab for Apache Camel 🔍 Overview CVE-2025-27636 is a critical Remote Code Execution RCE vulnerability in Apache Camel , specifically in the camel-exec component. It stems from a subtle but dangerous issue: TheDefaultHeaderFilterStrategy performs...

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...

Vulnerability-Research-CVE-2017-0144

Vulnerability-Research-CVE-2017-0144 LAB: ATTACK ON WINDOWS OPERATING SYSTEM BASED ON SMB PROTOCOL VULNERABILITY. I. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB protocol of the Windows operating system. One machine runs Kali Linux,...

cve-2022-42889-text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

Log4Shell-vulnerability-CVE-2021-44228-

Log4Shell Threat Detection CVE-2021-44228 Overview This repository provides an in-depth analysis and implementation of a Machine Learning-based Log4Shell CVE-2021-44228 Threat Detection System. It includes: Understanding Log4Shell : What it is and why it is dangerous Dataset Collection : Sources...