1325938 matches found
CVE-2026-116864
The WPCargo Track & Trace WordPress plugin versions
CVE-2026-116864 WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability
Author PHP Object Injection in WPCargo Track & Trace = 8.0.5 versions...
EUVD-2026-112959
Unauthenticated PHP Object Injection in GEO my WordPress = 4.5.5.3 versions...
CVE-2026-61991
The AjaxLoadMore Cache WordPress plugin versions
CVE-2026-61991 WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in AjaxLoadMore Cache = 3.1.1 versions...
EUVD-2026-112947
Shop manager PHP Object Injection in YayMail = 4.4.6 versions...
PanOsExploitMultitool
PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...
CVE-2024-4577-RCE-EXP
TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP and POC CVE-2024-4577-RCE-EXP CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform RCE EX...
log4shell-homework9
Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...
EUVD-2026-113160
Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network...
CVE-2026-96192
A Use after free vulnerability in Microsoft Edge for iOS (Chromium-based) allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. Whi...
CVE-2022-29063
CVE-2022-29063: Java Deserialization via RMI Connection in Apache OfBiz The OfBiz Solr plugin is configured by default to automatically make a RMI request on localhost, port 1099. By hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a...
CVE-2013-0156
Rails YAML deserialization RCE CVE-2013-0156 - PentesterLab Compatible Ronin-free, Ruby 3.x compatible version of https://gist.github.com/postmodern/4499206 Usage: ruby railsrce.rb http://target/ "system'/usr/local/bin/score UUID'" ⚠️ LEGAL DISCLAIMER ⚠️ This script is for EDUCATIONAL PURPOSES ONLY...
CVE-2015-8351
gwollebuster this script is exploit for wordpress old plugin gwolle usage: ./gwollebuster.py first arguments = your target url of wordpress that installed gwolle second arguments = your ip third arguments = listening port for reverse shell example: ./gwollebuster.py http://vulnpress.com/...
EUVD-2026-113159
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...
CVE-2026-18894 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner's runtime context within the server process. This bypasses the intended trust boundary where public execution paths are...
CVE-2026-18894
IBM Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to a code injection flaw (CWE-94 ). A remote attacker can trigger pre-existing stored Python component code within a public workflow, executing it under the flow owner's runtime context. This bypasses the trust boundary intended to res...
Android-vulnerability-exploitation
Android-vulnerability-exploitation Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same thing And then Having learned of this, ...
CVE-2026-101288
IBM Langflow OSS versions 1.0.0 through 1.12.3 are vulnerable to a Code Injection vulnerability (CVE-2026-101288 ). A remote authenticated attacker can execute arbitrary code due to the improper neutralization of special elements used in code. This flaw has a CVSS base score of 8.8 , indicating h...