CVE-2026-87986

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...

CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — elFinder Command Injection PoC Command injection vulnerability in elFinder = 2.1.47 via the PHP connector component. Allows unauthenticated remote code execution as the web server user. How it works Uploads a valid JPEG with a malicious filename containing a shell command. Trigger...

CVE-2026-87985

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval...

EUVD-2026-76120

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted arguments. These arguments are not properly inspected, enabling a crafted allowlisted command to execute arbitrary code on the user's system without approval...

CVE-2026-87985

Mistral Vibe contains an arbitrary code execution vulnerability caused by ANSI-C quoted arguments that bypass command permission checks. Because these arguments are not properly inspected, an attacker can craft an allowlisted command to execute arbitrary code on the user's system without requirin...

CVE-2026-25938-FUXA-Unauthenticated-RCE

CVE-2026-25938 - FUXA 未认证远程代码执行 1. 什么是 FUXA？ FUXA 是一个免费、开源的基于 Web 的 SCADA（监控与数据采集 ）和 HMI（人机界面 ）平台，用于工业自动化 、IoT 和实时过程可视化 。它使用户能够直接在 Web 浏览器中构建自定义仪表板并监控机器，无需昂贵的专有软件或笨重的桌面编辑器。 2. 漏洞说明 CVE-2026-25938 影响 FUXA 的 1.2.8 至 1.2.10 版本，前提是 Node-RED 集成功能 已启用（默认启用）。该漏洞源于对暴露 Node-RED 功能的功能身份验证执行不足 ，允许未认证的远程攻击者...

XSS2Shell-CVE-2026-64638

CVE-2026-64638 — XSS2Shell WordPress 预认证反射型 XSS → 远程代码执行链 DOM Clobbering + 应用密码窃取 + REST API 插件激活 = 完整 RCE ⚡ 概述 CVE-2026-64638 是 WordPress wp-login.php 中的一个严重预认证反射型 XSS 漏洞。该漏洞源于登录错误消息在回显提交的用户名时未进行正确的 HTML 编码 ，从而允许通过 进行 DOM Clobbering，绕过大多数过滤器。 当与 WordPress 的应用密码功能链式利用时，此 XSS 可成为完整远程代码执行 攻击链 ——...

MAL-2026-16127 Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...

Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...

Malicious code in web3-eth-account (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e3eadaccc63a1e12d0e3cfe153cbf78e114f30285d4da3694990827e5f5c5a The package web3-eth-account typosquats the legitimate eth-account library and copies its metadata ApeWorX/ethereum.org author addresses, README...

MAL-2026-16129 Malicious code in web3-eth-account (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e3eadaccc63a1e12d0e3cfe153cbf78e114f30285d4da3694990827e5f5c5a The package web3-eth-account typosquats the legitimate eth-account library and copies its metadata ApeWorX/ethereum.org author addresses, README...

Vulnerability was concealed in N-central of N-able

N-able discovered a vulnerability in N-central versions prior to 2026.3.1.14. The vulnerability involves a pre-authentication remote code execution flaw. An attacker can execute arbitrary code on the affected system remotely, without any form of authentication. All installations running on...

CVE-2026-35031

CVE-2026-35031：Jellyfin 字幕上传路径遍历至 RCE -darkred?style=flat-square -orange?style=flat-square 摘要 Jellyfin 媒体服务器中存在一个严重的路径遍历漏洞，允许具有“上传字幕”权限的经过身份验证的用户将文件上传到磁盘上的任意位置。通过利用字幕上传端点中未经验证的 Format 字段，攻击者可以写入敏感位置的文件、窃取敏感数据、提升权限，并最终通过 LDPRELOAD 注入以 root 身份执行任意代码。 CVSS 评分： 9.9（严重） 受影响版本： Jellyfin 10.11.7 修复版本：...

CVE-2026-34197-Apache-ActiveMQ-RCE

修复由于未对command进行xml转义导致的reverseshell失败的问题...

CVE-2025-69985

FUXA ≤ 1.2.8 Auth Bypass + RCE CVE-2025-69985 📜 Description This Python exploit targets CVE-2025-69985, a critical authentication bypass vulnerability in FUXA web-based SCADA/HMI software versions ≤ 1.2.8. By sending a crafted JSON payload with embedded Node.js code to the unprotected...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server = 7.4.3. A NULL byte injected into the username parameter during login causes Lua code to be written into the session file. When /dir.html is accessed with the resulting session cookie, the...

Exploiting-a-vulnerability-using-reverse-shell

Information Security Fundamentals — Spring 2026 Project Total Points: 20 | Deadline: No late submissions accepted Overview This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability CVE-2025-32433 in...

log4j-shell-poc

log4shell-poc（CVE-2021-44228） 针对Log4j漏洞（CVE-2021-44228）的概念验证（PoC）利用工具，该漏洞也被称为Log4Shell。该工具会生成一个恶意Java类，启动LDAP引用服务器，并通过HTTP提供payload，使远程攻击者能够在易受攻击的目标上执行任意命令。 功能特性 自动检测本地IPv4地址作为默认绑定IP。 内置JDK 1.8.020支持（推荐），并回退到系统Java。 内联反弹shell payload（回连到netcat监听器）。 干净的编译与生成文件清理。 环境要求 Python 3.6 或更高版本 以下文件/目录必须与...

CVE-2025-13486

Mass Exploit CVE-2025-13486 Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepareform ⚠️ Vulnerability Details The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via th...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / 研究 + PoC 创建 1 个快捷方式 + 1 个包含恶意 payload 的 .DLL = 放入 USB 发送给受害者 = 受害者打开 USB = Payload 自动触发！ 根本原因 1. 首先我们需要弄清楚这个漏洞究竟出在哪里！它源于名为 Plug-and-Play（即插即用） 的功能，操作系统会自动检测设备、分配资源并加载合适的驱动程序，使其无需重启电脑即可立即工作。当你插入 USB 并用 Windows Explorer explorer.exe 打开文件夹时，操作系统会扫描文件，以便向用户显示相应的图标图像！ 2. 从旧版 Windows...