cve_2025_20265

PoC for CVE-2025-20265 Advisory ⚠️ WARNING This is a functional exploit for a 1-day vulnerability. It can execute code on vulnerable systems. Use only on your own internal servers you are authorized to test. Unauthorized use is illegal and unethical. Use at your own risk. You are responsible for...

CVE-2020-5903

CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...

CVE-2021-42362

CVE-2021-42362 The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be...

dlink_shell_poc

dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...

MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...

CVE-2026-37468

Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the Profile editing functionality, chat messaging component...

CVE-2026-119116

A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow an application that runs on the parent EC2 instance to corrupt heap memory inside a Nitro Enclave which may lead to arbitrary co...

CVE-2026-76012 Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Upload

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

EUVD-2026-114236

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

CVE-2026-76012 Photo Gallery, Sliders, Proofing and Themes <= 4.4.1 - Authenticated (Custom+) Local File Inclusion via Lightroom 'gallery_edit' Task property_list + Image Upload

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacyrender function. This is due to broken authorization on the Lightroom galleryedit endpoint combined with mass...

CVE-2026-76012

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution (RCE) in versions up to and including 4.4.1 . The flaw resides in the legacy_render function, triggered by broken authorization on the gallery_edit endpoint. Attackers can...

CVE-2026-115346 Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded files. This mak...

EUVD-2026-114229

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded files. This mak...

CVE-2026-115346 Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 7.16.2 via the convertpaletteimagestotruecolor function. This is due to insufficient file type validation before processing uploaded files. This mak...

CVE-2026-115346

The Avada | Website Builder For WordPress & WooCommerce theme is vulnerable to unauthenticated arbitrary file upload in versions up to and including 7.16.2 . The flaw exists in the convert_palette_images_to_truecolor() function due to insufficient file type validation during the processing of upl...

EUVD-2026-114222

The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0.1. This makes it possible for authenticated attackers, wi...

CVE-2022-29464

CVE-2022-29464 A preauth arbitrary file upload that leads to RCE in WSO2 Summary of the CVE CVE-2022-29464 is a RCE vulnerability for WSO2 discovered by Orange Tsai. A unauthenticated arbitrary file upload allows an attacker to execute code by uploading a malicious JSP file. Affected Versions WSO...

MAL-2026-18411 Malicious code in neuralwhatsapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a341f13b84ee9c8702ac43dd0af78bc97a5ade2ed81a3593817d389529d73a50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

test_iconv

Testing CVE-2024-2961 V1 - Under Analysis This repository contains a C program to test for CVE-2024-2961, which involves a buffer overflow vulnerability in the iconv function of the GNU C Library glibc. Due to the structure of PHP’s heap, this overflow can be exploited to modify part of a free li...

jboss-deserialization

JBoss Insecure Deserialization to RCE via CVE-2017-12149. JBoss Insecure Deserialization - RCE Exploitation Lab. The idea here is to setup a lab with an old JBoss version 7.0 in order to exploit the vulnerability. We can use Docker to facilitate all the process. For this, we're gonna need an Orac...