CVE-2025-1974

CVE-2025-1974 — IngressNightmare ingress-nginx Introduction This document presents a study of the vulnerability CVE-2025-1974 affecting the ingress-nginx component validating admission controller for Kubernetes. CVE-2025-1974 is a critical vulnerability CVSS 3.1 9.8, an unauthenticated Remote Cod...

CVE-2026-76461

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs

A vulnerability in TeamViewer could let attackers run code on an IT support technician’s computer when the technician…...

CVE-2019-12840

CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Usage : 1-setup a netcat listener. 2- python3 exploit.py Notes: Provide the url for example: http://:port Please copy 'sid' cookie from your browser and supply it for the exploit to work...

CLEANSTART-2024-DQ85952 If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution

CVE-2022-2200 affects multiple packages. If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. See references for individual vulnerability details...

CVE-2023-6553

CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup :9000/a.sh |bash';?" 3. You wil...

CVE-2023-38408

CVE-2023-38408 Slide and source code for CS-782 attack presentation...

CVE-2025-49113

CVE-2025-49113 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization...

CVE-2026-116852

The WordPress Widget Options plugin (versions ≤ 4.2.5 ) is vulnerable to Remote Code Execution (RCE) . The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the provided documents confirm the existence of the RCE and its CRITICAL severity, specific technical ...

CVE-2026-116852 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability

Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...

EUVD-2026-114309

Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...

cve-2013-3900-remediation-report

Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...

CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...

CVE-2026-78527

The WordPress GS Testimonial Slider plugin versions

CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability

Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...

POC-CVE-2018-25031

CVE-2018-25031 - Swagger UI before 4.1.3 A simple POC CVE-2018-25031 that tricks the victim into entering the authorization code, which is then sent to the attacker. You can use it with the XSS Vulnerability https://github.com/VictorNS69/swagger-ui-xss It is necessary to find the parameter and...

CVE-2026-116964

A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery CI/CD workflow environment. By injecting shell commands into environment export scripts, the attacker causes manifest...

CLEANSTART-2024-PY35217 Code injection in the go command with cgo before Go 1

Security vulnerability affects the go package. Code injection in the go command with cgo before Go 1...

CLEANSTART-2024-IS17193 Code injection in the go command with cgo before Go 1

Security vulnerability affects the go package. Code injection in the go command with cgo before Go 1...

CLEANSTART-2024-OK96020 go command may execute arbitrary code at build time when using cgo

Security vulnerability affects the go package. The go command may execute arbitrary code at build time when using cgo...