Weblogic_CVE-2020-14645

Weblogic CVE-2020-14645 coherence डीसेरियलाइज़ेशन भेद्यता सत्यापन कार्यक्रम वातावरण Maven 3 JDK 1.8 संकलन mvn package उपयोग विशिष्ट परीक्षण चरण: 1. POC लिखें 2. POC को class फ़ाइल में संकलित करें 3. संकलित POC को प्रकाशित करने के लिए एक स्थिर साइट शुरू करें 4. परीक्षण लक्ष्य द्वारा POC प्राप्त कर...

CVE-2026-93519

A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow...

agentic-ioc-scanner

agentic-ioc-scanner Scanner de IOC para ferramentas de IA agentivas — detecta Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 e DPRK PromptMink. Um kit de deteção para comprometimento de assistentes de codificação de IA agentivos Claude Code, Gemini CLI, Cursor e das dependências que eles...

redis-cve-2026-23479-check

redis-cve-2026-23479-check Um verificador de versão seguro e somente leitura para CVE-2026-23479 — a use-after-free no código de cliente bloqueante do Redis que permite que um usuário autenticado alcance execução remota de código no host. Ele não explora o bug. Ele conecta, opcionalmente autentic...

CVE-2026-87902

CVE-2026-87902 — WordPress Core पाथ ट्रैवर्सल / LFI / RCE WordPress core के पेज-टेम्पलेट रिज़ॉल्वर में डबल-एन्कोडेड पाथ ट्रैवर्सल के माध्यम से अनऑथेंटिकेटेड लोकल फ़ाइल इन्क्लूज़न, PEAR-आधारित RCE चेन के साथ। भेद्यता विवरण फ़ील्ड| मान ---|--- CVE| CVE-2026-87902 CVSS| 9.2 Critical —...

CVE-2024-21762

CVE-2024-21762 - FortiGate SSL VPN RCE Detection & Exploitation Tool Ferramenta de detecção e exploração para CVE-2024-21762 - Vulnerabilidade crítica em FortiGate SSL VPN ⚠️ AVISO LEGAL : Esta ferramenta é exclusivamente para uso em ambientes de teste autorizados. O uso não autorizado em sistemas...

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

NPM: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Summary Flowise = 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist validatePythonCodeForDataFrame to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an extern...

GHSA-W7X8-Q2GP-5CGG Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

Summary Flowise = 3.1.2 CSV Agent and Airtable Agent nodes use a regex-based blocklist validatePythonCodeForDataFrame to sanitize LLM-generated Python code before execution in Pyodide. The validator has multiple structural bypasses that allow an attacker to exfiltrate all loaded data to an extern...

GHSA-9GVV-QJJ3-2P6G Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

Flowise packages flowise and flowise-components in versions = 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox. An authenticated user with access to the /api/v1/node-custom-function endpoint can escape the sandbox by supplying attacker-controlled executablePath and...

NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise versions = 3.1.2...

NPM: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file read via Chromium

authenticated RCE and arbitrary file read via Chromium vulnerability discovered by ? in WordPress Npm flowise-components versions = 3.1.2...

CVE-2025-8110-PoC

CVE-2025-8110 PoC Script Python de prova de conceito para CVE-2025-8110 — Gogs v0.13.3 UpdateRepoFile symlink RCE. Único disparo: o próprio PUT malicioso aciona git fetch → sshCommand → reverse shell. ⚠️ Apenas para fins educacionais e pesquisa de segurança autorizada. Executar esta ferramenta...

POC-CVE-2025-24813

CVE-2025-24813 – Ambiente de Demonstração PoC Este repositório contém uma aplicação simples construída para observar o comportamento do CVE-2025-24813, uma vulnerabilidade recente no Apache Tomcat relacionada ao uso do DefaultServlet com escrita habilitada readonly=false, permitindo operações de...

CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

Gitlab-CVE-2021-22205

RCE não autenticado em Gitlab versão -c Testado na versão 13.10.1-ce.0...

CVE-2009-2265-fix

CVE-2009-2265 - Adobe ColdFusion RCE ColdFusion के साथ बंडल किए गए FCKeditor कंपोनेंट में मनमानी फ़ाइल अपलोड के माध्यम से अनऑथेंटिकेटेड रिमोट कोड एक्ज़ीक्यूशन। फ़ाइल अपलोड एंडपॉइंट filename पैरामीटर में null-byte इंजेक्शन स्वीकार करता है, जिससे एक JSP वेबशेल अपलोड हो सकता है और सर्वर द्वारा सीधे...