304445 matches found
CVE-2017-12615-Home-Lab
ENGLISH BELOW CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Lab ΰΈΰΈ΅ΰΉΰΈΰΈ³ΰΈ₯ΰΈΰΈΰΈΰΉΰΈΰΈΰΉΰΈ«ΰΈ§ΰΉ CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload ΰΉΰΈΰΈ΄ΰΈΰΈΰΈ²ΰΈΰΈΰΈ²ΰΈ£ΰΈΰΈ±ΰΉΰΈΰΈΰΉΰΈ² readonly=false ΰΈΰΈ³ΰΉΰΈ«ΰΉΰΈͺΰΈ²ΰΈ‘ΰΈ²ΰΈ£ΰΈΰΈΰΈ±ΰΈΰΉΰΈ«ΰΈ₯ΰΈΰΉΰΈΰΈ₯ΰΉΰΈΰΉΰΈ²ΰΈ HTTP PUT ΰΉΰΈΰΉ ΰΈ£ΰΈ§ΰΈ‘ΰΈΰΈΆΰΈΰΉΰΈΰΈ₯ΰΉ .jsp ΰΈΰΈ΅ΰΉΰΈͺΰΈ²ΰΈ‘ΰΈ²ΰΈ£ΰΈΰΈ£ΰΈ±ΰΈΰΈΰΈ³ΰΈͺΰΈ±ΰΉΰΈ RCE Features Apache Tomcat 7.0.79...
CVE-2024-50482
CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...
CVE-2026-87115
The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticated attackers to delete arbitrary files...
CVE-2025-39538
π‘οΈ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 Arbitrary File Upload CVE-2025-39538 Published: 2025-04-16 Vulnerability Type: Arbitrary File Upload Unrestricted Upload of File with Dangerous Type Affected Plugin: WP-Advanced-Search by Mathieu Chartier Affected Versions: All versions up...
CVE-2023-2636
CVE-2023-2636...
CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite
3. CVE-2026-9999 β Serverless Function Event Injection Path Traversal β Code Overwrite Overview A serverless platform that processes object storage events does not sanitize the object.key field, allowing an attacker to overwrite the functionβs source code via path traversal. Severity: Critical RC...
CVE-2022-24112
CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei template: CVE-2022-24112.yaml The essence of this vulnerability is similar to CVE-2021-45232, both bypass authorization or are unauthenticated, to execute malicious filterfunc or script in a route to execute commands...
CVE-2026-42945_NginxRift
π NGINX Rift PoC Automation β CVE-2026-42945 PoC Automation Driver for RCE exploitation of thenginx-rift container Β· Target verification β Single-command exploit β Interactive reverse shell One command orchestrates the entire exploit flow β from container check to getting a shell. β οΈ Ethical &...
CVE-2019-9202
CVE-2019-9202 Nagios IM 2.6 remote code execution exploit: CSRF + SQLi + RCE + LPE -- remote root Description By chaining a Cross-Site Request Forgery CSRF / authorization bypass CVE-2019-9203 it is possible to exploit a Union-based SQL injection CVE-2019-9204, a Remote Code Execution RCE...
CVE-2020-16947
CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduction I went into a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend lab. I mimicked a real-world zero-day attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection key...
UltraRealy_with_CVE-2019-1040
UltraRelay Updated by Lazaar Sami for the exploit CVE-2019-1040 UltraRelay is a tool for LLMNR poisoning and relaying NTLM credentials. It is based on Responder and impack. I have updated the original version https://github.com/5alt/ultrarelay for the exploit CVE-2019-1040. Dirk-jan Mollema has...
EUVD-2026-91958
The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticated attackers to delete arbitrary files...
CVE-2026-87115
The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion in all versions up to and including 1.2.21 . The root cause is insufficient file path validation within the extract function, specifically involving the old_vapcfN parameter...
CVE-2026-87115 VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter
The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticated attackers to delete arbitrary files...
CVE-2026-Discord
Critical Vulnerability Report: Discord macOS Client Date : 2026-01-25 Target : Discord Client macOS Stable 0.0.373 Author : Antigravity π¨ Executive Summary We have identified a critical security vulnerability in the Discord macOS Client Electron-based involving the forced exposure of the Remote...
langflow-rce-exploit
Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...
CVE-2023-51385_test
Verify CVE-2023-51385 First, add the following to /.ssh/config δΈ»ζΊ .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement url = ssh://echo helloworld cve.txtfoo.example.com/bar After configuration is complete, execute the...
CVE-2021-21972
CVE-2021-21972 Description The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts...
microsoft-diagcab-rce-poc
microsoft-diagcab-rce-poc Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution You can find the full advisory here: https://medium.com/@radimre83/the-trouble-with-microsofts-troubleshooters-6e32fc80b8bd...