CVE-2026-81633

CVE-2026-81633 is an improper input validation vulnerability in ash-project ash_graphql (Elixir GraphQL library). The function resolve_node/2 base64-decodes a client-supplied global ID and passes the type segment directly to Map.fetch!/2, which raises an unhandled KeyError when the type is not a ...

CVE-2019-6690

Summary It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 CVE-2019-6690. Vulnerable python python-gnupg 0.4.3 python python-gnupg 0.3.6 python python-gnupg 0.3.5 python python-gnupg 0.3.4 Mitigation Users should upgrade to 0.4.4 Test Environment Docker Image docker pull...

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...

EUVD-2026-68267

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The...

CVE-2026-82550

A security flaw in Linux Foundation Magma 1.9.0 affects the NGSetupRequest Handler component. An attacker can manipulate the NG-IoT-DefaultPagingDRX argument to trigger an improper input validation issue, enabling remote exploitation without authentication or user interaction. The primary impact ...

CVE-2021-3754

CVE-2021-3754 This repository documents Vulnerability details and exploit for CVE-2021-3754 discovered and reported by myself on 21st August 2021 Metrics CWE-20: Improper Input Validation CVSS: 5.3 MEDIUM Description A flaw was found in Apache Keycloak & Redhat SSO where an attacker is able to...

CVE-2024-20404

Description A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent ...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE Vulnerability Cause Analysis 1. Lack of Code Security Inspection Problem: The system does not perform any security inspection on user-provided source code. Evidence: generateexecutionscript method directly inserts user code into the execution script: root@kitploit: code +...

CVE-2022-24087

CVE-2022-24087-RCE and CVE-2022-24086-RCE CVE description CVE-2022-24086 and CVE-2022-24087 - improper Input Validation vulnerability in contact form Magento Open Source and Adobe Commerce - has received a CVSS score of 9.8 out of 10, it is classified as a pre-authentication issue which means tha...

CVE-2024-21534-poc

Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...

CVE-2025-20281-Cisco

CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...

CVE-2024-32002-PoC_Chinese

CVE-2024-32002 Vulnerability Overview ⚠️Caution!: Do not clone this repository!!!⚠️ Description CVE-2024-32002 is a critical security vulnerability discovered in Git software. This vulnerability allows remote attackers to execute arbitrary code on affected systems through specially crafted Git...

OESA-2026-3527 iperf3 security update

Iperf is a tool for active measurements of the maximum achievable bandwidth on IP networks. It supports tuning of various parameters related to timing, protocols, and buffers. Security Fixes: A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted...

CVE-2023-43340

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:18+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-29 23:00:18+00:00| seen| Telegram/tcvPlgy4RT-8DYuUczCHAOelno4AcU1hpFFn5ph0Pb3yXE 2026-08-30 00:00:26+00:00| seen|...

CVE-2019-16172

CVE-2019-16172 Lo scanner CVE-2019-16172 è progettato per verificare le istanze di LimeSurvey per la vulnerabilità XSS memorizzata. Descrizioni CVE CVE-2019-16172 Descrizione: CVE-2019-16172 è una vulnerabilità XSS memorizzata trovata nelle versioni di LimeSurvey precedenti alla 3.17. La...

CVE-2024-29973

CVE-2024-29973 – Sicherheitslücke zur Remote-Befehlsinjektion Beschreibung Bei CVE-2024-29973 handelt es sich um eine kritische Sicherheitslücke in bestimmten Netzwerkgeräten von Zyxel. Diese Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer, beliebige Befehle auf dem Zielgerät...

CVE-2024-46636-SQLi-MODAPS

CVE-2024-46636 è una vulnerabilità di SQL Injection identificata nel sistema MODAPS di NASA EOSDIS, causata da una convalida impropria dell'input nel parametro category. Questa vulnerabilità consente agli attaccanti di accedere a dati sensibili ed eseguire query SQL arbitrarie attraverso la...

CVE-2023-31584

CVE-2023-31584 - Vulnerabilità di Cross Site Scripting in cu/silicon Link Github: https://github.com/cu/silicon Versione interessata: 1 Gravità e CVSS: Verrà aggiornato al termine della revisione da parte di NIST. Tipo: Cross Site Scripting Causa principale: Mancanza di una corretta validazione e...

node-pdf-generator-ssrf

CVE-2020-7740 Questo interessa tutte le versioni del pacchetto node-pdf-generator. A causa della mancanza di convalida e sanificazione dell'input dell'utente eseguita sul contenuto fornito a node-pdf-generator, è possibile per un attaccante creare un url che verrà passato a un server esterno...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails precedente alla versione 3.2.22.2, 4.x precedente alla 4.1.14.2 e 4.2.x precedente alla 4.2.5.2 consente ad attaccanti remoti di eseguire codice Ruby arbitrario sfruttando l'uso illimitato del metodo render da parte di un'applicazione. Classe Errore di...