57501 matches found
CVE-2026-59774
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files...
CVE-2026-110644
nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $ command substitution or closing quotes, which are interpolated into an...
CVE-2026-110642
A flaw was found in xhtml2pdf. This vulnerability allows an attacker to execute arbitrary commands by convincing a user to process a file with a specially crafted name while using the viewer option. Because the software fails to properly sanitize the file name before passing it to the operating...
CVE-2026-103929 mise permits untrusted local configuration to override default shell arguments
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml settings from an untrusted local project before trust approval and striplocalonlysettings removes only fields marked globalonly. The unixdefaultfileshellargs,...
CVE-2026-103929
The mise tool (versions prior to 2026.7.14 ) contains a vulnerability where untrusted local configurations can override default shell arguments in default non-safe mode. Specifically, the application loads .mise.toml [settings] from untrusted projects without proper trust approval. Because certai...
CVE-2019-9193-Home-Lab
ENGLISH BELOW CVE-2019-9193 ā PostgreSQL COPY FROM PROGRAM RCE Lab ąøąøµą¹ąøąø³ąø„ąøąøąøą¹ąøąøą¹ąø«ąø§ą¹ CVE-2019-9193 ąøąøµą¹ą¹ąøąø“ąøą¹ąø PostgreSQL ą¹ąø§ąøąø£ą¹ąøąø±ąø 9.3 - 11.2 ąøąø¶ą¹ąøą¹ąøąø“ąøą¹ąø«ą¹ user ąøąøµą¹ą¹ąøą¹ąø superuser ąø«ąø£ąø·ąøąø”ąøµ role pgexecuteserverprogram ąøŖąø²ąø”ąø²ąø£ąøą¹ąøą¹ąøąø³ąøŖąø±ą¹ąø: COPY ... FROM PROGRAM '' ą¹ąøąø·ą¹ąøąø£ąø±ąøąøąø³ąøŖąø±ą¹ąø OS ą¹ąøą¹ą¹ąøąø¢ąøąø£ąø ąøŖą¹ąøąøąø„ą¹ąø«ą¹ą¹ąøąø“ąø Remot...
EUVD-2026-101281
Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea service account. If the disclosed files...
EUVD-2026-101275
Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names. The convertDocxToHtml function in src/converter.ts invokes pandoc through execa with shell:true, so shell metacharacters in the --doc...
EUVD-2026-101272
nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType that allows attackers to execute commands by supplying crafted audio file paths. Attackers can provide file names containing $ command substitution or closing quotes, which are interpolated into an...
CVE-2026-110634
The git-diff library (versions before 2.0.7 ) is vulnerable to OS Command Injection via the gitDiff API . The root cause is that the library fails to properly neutralize special characters in diffed document strings, allowing attackers to embed $(cmd) or backtick substitutions . These substitutio...
EUVD-2026-101259
Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty corepublickeys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...
CVE-2025-7775-vulnerable-lab
CVE-2025-7775 Vulnerable Lab This repository provides a vulnerable setup to test nuclei template for CVE-2025-7775. Run docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app Vulnerability Tests 1. Remote Command Execution RCE curl -X POST...
CVE-2026-55601
A flaw was found in MultiTail. When using the execute-on-match feature, MultiTail fails to properly sanitize matched log data before passing it to the system shell for command execution. An attacker capable of influencing the contents of monitored input can exploit this issue by injecting shell...
CVE-2026-108072
Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server...
CVE-2014-6271
CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. š Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...
CVE-2023-27997-POC
Usage: python3 cve-2022-42475.py rhost rport lhost 'command' Exemple: python3 cve-2022-42475.py 192.168.10.1 8443 10.10.1.1 'ls -la /' Disclaimer: This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is...
CVE-2026-87902
CVE-2026-87902 | ---|--- Advisory| GHSA-7hp8-65ch-5whp Product| WordPress = 7.1.1, fixed in 7.1.2; both versions tested Sink| wp-includes/template.php, getpagetemplate Cause| the candidate built from pagename is not passed through validatefile Actor| anonymous, no account, no cookie, no CSRF toke...
Exploit-CVE-2025-68613
Exploit-CVE-2025-68613 Security Advisory: Critical Remote Code Execution Vulnerability in n8n CVE-2025-68613 A critical vulnerability has been identified in the n8n workflow automation tool that allows for arbitrary code execution. Authenticated users with permissions to create or edit workflows...
CVE-2026-34990
CVE-2026-34990 Description CVE-2026-34990 - OpenPrinting CUPS versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on...
CVE-2025-65964
n8n Git Hooks CTF Demo ā ļø This repository is for educational and CTF demonstration purposes only. Scenario An automation platform e.g., n8n uses Git operations as part of a workflow. The workflow allows arbitrary Git configuration via git config. An attacker-controlled workflow sets:...