17856 matches found
CVEHarvest
CVEHarvest Multi-CVE exploitation framework for Windows syste...
CVE-2026-87902-Toolkit
CVE‑2026‑87902 – WordPress Unauth LFI→RCE Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse Act UK...
CVE-2025-13597
AI Feeds = 1.0.11 - 인증되지 않은 임의 파일 업로드 AI Feeds WordPress 플러그인 1.0.11 이하 버전에는 actualizadorgit.php 파일에 인증되지 않은 원격 코드 실행 취약점이 존재합니다. 이 파일은 인증이나 권한 확인 없이 HTTP로 직접 접근할 수 있어, 인증되지 않은 공격자가 임의의 GitHub 저장소를 다운로드하고 플러그인 파일을 덮어써 원격 코드 실행을 유발할 수 있습니다. TL;DR 익스플로잇 CVE-2025-13597.py는 원격 공격자가 shell.php를 업로드하고 원...
FULL-ANALYSIS---CVE-2026-45829-ChromaDB-
CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ ПРЕДУПРЕЖДЕНИЕ Этот репозиторий содержит РАБОЧУЮ PoC для CVE-2026-45829. ТОЛЬКО для авторизованного тестирования в контролируемых средах. Описание Критическая уязвимость в ChromaDB версии 1.0.0 - 1.5.8, позволяющая неаутентифицированному...
CVE-2026-85423
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...
EUVD-2026-94793
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...
Rejetto-HFS-2.x-RCE-CVE-2024-23692
Rejetto HTTP File ServerHFS의 인증되지 않은 SSTI 취약점입니다. 최초 발견자 PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ 테스트된 버전: 2.4.0 RC7, 2.3m 사용 예시: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured, defaulting to...
CVE-2026-85423
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...
EUVD-2026-94788
A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...
CVE-2026-85423
A vulnerability exists in the data collection service of Brocade ASCG versions prior to 3.5.0 . An API endpoint within the data collector service lacks proper authentication or authorization checks for incoming requests. An attacker with network access can exploit this to instruct the application...
CVE-2026-86828 BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code...
CVE-2026-86828
The BackWPup WordPress plugin (versions prior to 5.7.7 ) is vulnerable to a path traversal flaw during the backup restore process. When the plugin's fallback archive library is utilized, it fails to properly restrict the destination path of extracted files. This allows high-privileged users to wr...
WordPress BackWPup plugin < 5.7.7 - Admin+ Path Traversal to RCE vulnerability
Admin+ Path Traversal to RCE vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin BackWPup versions 5.7.7...
CVE-2026-11344-RCE
Система управления транспортными средствами на PHP - Неавторизованное удаленное выполнение кода через загрузку файла в newdriver.php Информация об уязвимости Поле| Подробности ---|--- Продукт| Система управления транспортными средствами на PHP Вендор| code-projects.org Версия| V1.0 Тип уязвимости...
Exploit for CVE-2026-105192
CVE-2026-105192 LMCache Unauthenticated RCE via Pickle Dese...
CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ
InSAT MasterSCADA BUK-TS - 인증되지 않은 RCE CVE-2026-22553 | CVSS 9.8 심각 | 익스플로잇 작성자: Mohammed Idrees Banyamer 📝 설명 InSAT MasterSCADA BUK-TS 는 MMadmServ 웹 인터페이스에서 인증되지 않은 OS 명령 삽입 취약점이 존재합니다. 이 결함으로 인해 원격 공격자는 인증 없이 완전한 원격 코드 실행RCE을 달성할 수 있습니다. 영향을 받는 제품 : InSAT MasterSCADA BUK-TS 모든 버전 취약점 유형 : OS 명령...
Exploit for CVE-2026-61424
CVE-2026-61424 Unauthenticated arbitrary file upload in the D...
CVE-2026-88533
CVE-2026-88533: 인증되지 않은 임의 파일 쓰기 → QAnything에서 루트 RCE CVE ID : CVE-2026-88533 MITRE에서 할당, 레코드 게시 대기 중 제품 : netease-youdao의 QAnything — 오픈소스 RAG / 지식베이스 QA 플랫폼 영향 버전 : v1.4.x부터 v2.0.0까지 기본 브랜치 qanything-v2, 최종 커밋 65de104까지 수정 버전 : 없음 — 2025-03-12 이후 프로젝트 유지보수 중단; 유일한 정화sanitization 수정PR 483은 레거시...
CVE-2021-41773-PoC
CVE-2021-41773-PoC 🚀 Режим использования ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Этот скрипт предназначен ТОЛЬКО для образовательных целей и авторизованного пентестинга. Использование данного инструмента в системах без явного разрешения НЕЗАКОННО. Автор...