1C-Bitrix Before and After Photos Code Execution

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

CodeScoring Template Code Execution

The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ascon.Pilot.WinService Auth Bypass Code Execution

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

FOQUZ Platform SQL Injection

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CrocoTime employee working time management system Code Execution

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-109443

JoySafeter versions up to and including 1.0.0 are vulnerable to a remote code execution (RCE) flaw. The issue stems from an unsandboxed execute tool within Copilot standard mode , where the agent can be manipulated to invoke subprocess.run with shell=True on the host system. Authenticated attacke...

CVE-2026-109443 JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell

JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot standard mode. Attackers can self-register, select standard mode in the WebSocket chat.start extension, and have the...

CVE-2026-109442

The piflow software versions 2.0.0 through 2.0.1 contain a remote code execution (RCE) vulnerability within the DeepAgents chat agent . The issue stems from a lack of authentication on the POST /chat and POST /chat/stream endpoints. An unauthenticated attacker can instruct the agent to invoke the...

CVE-2024-4879

CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...

Spring4Shell

Spring RCE CVE-2022-22965 Vulnerability Environment Environment Information springboot jdk11 tomcat9.0.30 payload Request Header Configuration "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Request Body Data...

Writing-Sample-1

Log4j: CVE-2021-44228 Summary of Log4j Vulnerability & Mitigations Table of Contents 1. Executive Summary 2. Identification of Vulnerable Endpoints and Services 3. Mitigations A. Block at the Border B. Install Endpoint Detection & Response EDR on Server Endpoints C. Place Vulnerable Enterprise Ap...

Nextjs_Exploit_Tool

Next.js RSC RCE Exploit Tool CVE-2025-55182 Project Introduction CVE-2025-55182 is a high-severity vulnerability in Next.js's Server Component RSC processing chain. An attacker can craft special multipart/form-data requests and forged RSC response chunks to induce the server to execute arbitrary...

CVE-2026-20841

🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...

cve-2018-15133

POC - CVE-2018-15133 Usage: $ ./CVE-2018-15133 -h Usage: ./CVE-2018-15133 options Options: -APIKEY string API key del sitio web de Laravel, codificada en base64 -URL string URL del sitio web de Laravel a atacar -command string Comando a ejecutar en el sitio web vulnerable; si no se especifica, se...

CVE-2024-36401-GeoServer-RCE

RCE vulnerability in GeoServer CVE-2024-36401 - detection script CVE-2024-36401 is a critical security vulnerability affecting GeoServer, an open-source server for sharing geospatial data, and GeoTools, an open-source Java library that provides tools for geospatial data. The vulnerability,...

CVE-2026-23479

CVE-2026-23479 — Redis Use-After-Free RCE PoC Collection HackSpeak distribution mirror. This repository consolidates three public PoC/detection tools , with code identical to each upstream. ⚠️ Contains actual exploit code and detection tools ; for security research, vulnerability verification, and...

n8n-exploit-CVE-2025-68613-n8n-God-Mode-Ultimate

n8n God Mode Ultimate - CVE-2025-68613 Scanner & Exploitation Framework Advanced n8n Workflow Automation RCE Scanner & Exploitation Tool 🎯 Overview n8n God Mode Ultimate is a comprehensive security testing framework designed to detect and validate CVE-2025-68613 in n8n workflow automation...

CVE-2019-17564

CVE-2019-17564 CVE-2019-17564 Apache Dubbo deserialization RCE video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4 video:https://video.twimg.com/tweetvideo/EQlT6nBUEAADdR2.mp4...