575753 matches found
CVE-2026-119415
CakePHP versions through 5.4.3 are vulnerable to a MIME header injection flaw within the FormDataPart component. The root cause is the insufficient sanitization of Content-Type and Content-ID values, which allows attackers to inject CR/LF sequences . This vulnerability can be triggered when provi...
EUVD-2026-113796
CakePHP through 5.4.3 contains an improper cookie domain validation vulnerability in the Http Client CookieCollection that allows malicious servers to receive and plant cookies by abusing unanchored suffix matching. Attackers controlling a host such as one ending in a victim domain suffix, or...
CVE-2026-119415 CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type
CakePHP through 5.4.3 contains a header injection vulnerability in FormDataPart that allows attackers to inject MIME part headers via unsanitized Content-Type and Content-ID values. Attackers can supply CR/LF sequences in attachment MIME types or Content-IDs passed to Message::setAttachments or...
EUVD-2026-113793
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2026-119409 OPNsense before 26.7.8 Root Command Injection via Firmware Mirror Setting
OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System: Firmware privilege to execute commands as root by storing a malicious firmware mirror URL. Attackers can submit shell metacharacters through POST /api/core/firmware/set that...
CVE-2026-119409
Versions of OPNsense before 26.7.8 are vulnerable to a root command injection vulnerability via the firmware mirror setting. An authenticated user with System: Firmware privileges can execute arbitrary commands as root by submitting shell metacharacters through the POST /api/core/firmware/set end...
CVE-2020-13942
CVE-2020-13942 Apache Unomi pre-auth RCE CVE-2020-13942 exploit POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200...
blindy
Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...
AOSP-DownloadProviderDbDumperSQLiWhere
AOSP-DownloadProviderDbDumperSQLiWhere PoC Exploiting SQL Injection in Android's Download Provider in Selection Parameter CVE-2019-2198 Security Advisory Android AOSP Download Provider SQL Injection in Query Selection Parameter CVE-2019-2198 Demo...
CVE-2022-21661-Demo
This repository demonstrates a vulnerability in WordPress 5.8.2, in which missing sanitization in class-wp-tax-query.php can, in very specific situations, allow attackers to perform SQL injection. Note that successful exploitation requires developers to add vulnerable code to the WordPress...
GitLab-preauth-RCE_CVE-2021-22205
GitLab-preauth-RCECVE-2021-22205 single line bash PoC for GitLab preauth RCE CVE-2021-22205 t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...
thymeleaf-check
thymeleaf-check ThymeleafCVE-2026-40477 / CVE-2026-41901 offline triage tool — zero dependencies, single jar, no network. Two CVSS 9.0 SSTI bypasses, with two fixed releases shipped within nine days. It first answers "which of these am I affected by," then answers the harder question: On my versi...
CVE-2019-20059
CVE-2019-20059 Yetishare SQL Injection in sSortDir0 parameter - v3.5.2 - v4.5.4. Apart from an admin being able to exploit this, it could also be used in a CSRF attack to trick an admin user into running malicious queries. Files affected paymentmanage.ajax.php paymentsubscriptionmanage.ajax.php...
MAGNOLIA-8281
MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...
CVE-2021-46704-POC
CVE-2021-46704-POC CVE-2021-46704 GenieACS Command Injection POC Affecting genieacs package, versions =1.2.0 1.2.8 How to fix? Upgrade genieacs to version 1.2.8 or higher. Affected versions of this package are vulnerable to Command Injection via the ping host argument lib/ui/api.ts and lib/ping.t...
CVE-2025-14598
CVE-2025-14598 CVSS: 9.8 Remote Unauthenticated SQL Injection leading to Remote Code Execution. Executive Summary A SQL Injection vulnerability was identified in the login functionality of BET e-Portal, a software solution widely deployed across educational institutions for student information an...
CVE-2026-25089
🚨 CVE-2026-25089 - Critical OS Command Injection in FortiSandbox 📖 Overview CVE-2026-25089 is a critical OS Command Injection CWE-78 vulnerability affecting multiple Fortinet FortiSandbox deployments. An unauthenticated remote attacker can exploit this flaw by sending specially crafted HTTP...
CVE-2022-46169
CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. Auth Bypass Add X-Forwarded-For header to bypass authentication, note that its value is not a fixed value. Brute Force Use Burp Intruder to fuzz test the values of hostid and localdataids. RCE The point of...