CVE-2026-93675

IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to an arbitrary code execution flaw. The root cause is identified as an expected dependency confusion vulnerability. A remote attacker could exploit this issue to execute code on the target system. No specific exploits or scanner sourc...

CVE-2026-97673

The Langflow OSS software versions 1.0.0 through 1.12.2 are affected by CVE-2026-97673 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693 ). This vulnerability can lead to high impact on confidentiality, integrity, and availability. ...

CVE-2026-97655

Langflow OSS versions 1.0.0 through 1.12.2 are affected by CVE-2026-97655 , which allows a remote attacker to execute arbitrary code. The root cause is an incomplete blocklist within the code security scanner, classified as CWE-94: Improper Control of Generation of Code ('Code Injection') . This ...

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the CodeScoring software development platform lies in its inability to eliminate special elements from the template creation mechanism, allowing attackers to execute arbitrary code.

The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to execute arbitrary code.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the CrocoTime employee working time management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary codes.

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-41892

CVE-2023-41892 - Craft CMS 远程代码执行（RCE） referensi: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2021-21985_PoC

CVE-2021-21985 漏洞代码 可用的CLASS/METHOD，用于PoC的简单示例：com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported getIsLocalDataProtectionSupportedOnVc...

CVE-2023-34362

CVE-2023-34362 影响MOVEit Transfer的CVE-2023-34362的POC 技术分析 该漏洞的技术根本原因分析可在我们的博客中找到： https://www.horizon3.ai/moveit-transfer-cve-2023-34362-deep-dive-and-indicators-of-compromise/ 摘要 此POC利用SQL注入获取系统管理员API访问令牌，然后利用该访问权限滥用反序列化调用以实现远程代码执行。...

CVE-2021-43503

警告 该漏洞已被撤销 Override 这是关于 CVE-2021-43503 的内容，我无法通过 exp 重现此漏洞。 需求 PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$c; namespace Mockery class ClosureWrapper private $closure; public function...

cve-2022-26134

CVE-2022-26134 由 1vere$k 提供 只是针对 Atlassian Jira 漏洞的简单 PoC。允许未授权用户在服务器上执行代码。 CVE-2022-26134 - OGNL 注入漏洞。 一个概念验证脚本，利用了影响 Atlassian Confluence 7.18 及更低版本产品的远程代码执行漏洞。该 OGNL 注入漏洞允许未认证用户在 Confluence Server 或 Data Center 实例上执行任意代码。 Payload...

SAP_EEM_CVE-2020-6207

CVE-2020-6207 的 PoC（SAP Solution Manager 中缺失认证检查） 此脚本用于检查并利用 SAP EEM Servlet（tcsmdagentapplicationeem）中的认证缺失漏洞，该漏洞可导致连接到 SAP Solution Manager 的 SAP SMDAgent 远程代码执行（RCE）。 原始发现者： Pablo Artuso Yvan 'iggy' G 论文：An Unauthenticated Journey to Root :Pwning Your Company's Enterprise Software Servers...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 未认证远程代码执行 使用 Python 3 不通过 Docker 运行： git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py 通过 Docker 运行： git clone...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Exploit PoC de Dompdf RCE alt text ExploitDB Las versiones de Dompdf 1.2.1 son vulnerables a Ejecución Remota de Código RCE mediante la inyección de CSS en los datos. Se puede engañar al archivo para que almacene una fuente maliciosa con extensión .php en su caché de...

CVE-2023-4220

RCE para Chamilo LMS CVE-2023-4220 utilizando una Web Shell Este proyecto automatiza la explotación de la vulnerabilidad de ejecución remota de código CVE-2023-4220 encontrada en Chamilo LMS. Utilizando una web shell, la herramienta facilita la explotación automatizada de la vulnerabilidad para...

CVE-2025-58434-AND-59528-POC

Flowise 双重 CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ 仅用于教育和授权的安全研究。 针对你不拥有或未经书面许可测试的系统运行此工具是非法的 。 目录 概述 漏洞详情 CVE-2025-58434 — 账户接管 CVE-2025-59528 — 远程代码执行 完整攻击链 受影响版本 仓库结构 环境要求 安装 使用说明 默认行为 帮助界面 链式模式 模块 — ATO 模块 — 登录 模块 — RCE 参数参考 反弹Shell vs 自定义命令 示例输出 修复建议 披露时间线 参考资料 免责声明 概述 本仓库将 Flowise 的两个严重...