CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-92202

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

CVE-2026-39987

CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...

EUVD-2026-107478

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqliquery of the file profile.php. The manipulation of the argument adminid leads to sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2026-114266

A security vulnerability exists in ProjectWorlds Advanced Library Management System 1.0 . The flaw resides in the mysqli_query function within the profile.php file, where improper handling of the admin_id argument allows for a SQL injection . This vulnerability can be exploited remotely , and pub...

Exploit for CVE-2026-109618

PHP Vulnerability Exposure Scanner An interactive Bash utilit...

Exploit for CVE-2026-109618

php2shell-check for Claude A passive check for Claude whether...

Exploit for CVE-2026-109618

php2shell-check A passive check for Claude whether a website...

CVE-2026-114265

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to SQL injection via the Search Form component. The flaw exists in the mysqli_query function within the returned_book_search.php file, where improper handling of the datefrom and dateto arguments allows for remote execution. P...

EUVD-2026-107425

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqliquery of the file returnedbooksearch.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection. The attack can be...

CVE-2025-49844-Vulnerability-Scanner

CVE-2025-49844 RediShell Vulnerability Scanner A comprehensive vulnerability scanner for testing Redis instances against the critical CVE-2025-49844 RediShell vulnerability. About the Vulnerability CVE ID : CVE-2025-49844 Name : RediShell CVSS Score : 10.0 Critical Type : Use-After-Free UAF in Lu...

CVE-2026-32475-PoC

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File Upload → RCE Proof-of-concept for CVE-2026-32475 CVSS 9.0: an unauthenticated arbitrary file upload vulnerability in the Elementor Pro WordPress plugin ≤ 4.2.1 that leads to remote code execution. | ---|--- CVE| CVE-2026-32475 CVSS| 9....

Apache-CVE-2026-23918-fix

Apache HTTP Server: http2: Double Free and possible RCE on early reset CVE-2026-23918. Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issu...

CVE-2026-114264

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to a SQL injection flaw within an unknown function in the edit_member.php file. Attackers can manipulate the firstname , middlename , lastname , address , branch , or type arguments to execute the injection. Remote exploitatio...

EUVD-2026-107415

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated- Remote Code Execution RCE Exploit Author: Ashish Koli Shikari Vendor Homepage: https://thedigitalcraft.com/ Software Link: https://github.com/thedigicraft/Atom.CMS Version: 2.0 CVE: CVE-2022-25487 About this: This script uploads...

Exploit for CVE-2026-109618

PHP2Shell: Two Days of Records – From Exposure, Previews to Pa...

EUVD-2026-107410

A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...

CVE-2026-114263

A SQL injection vulnerability exists in the ProjectWorlds Advanced Library Management System 1.0 within the individual_report_search.php file. The flaw is located in the mysqli_query function, where improper handling of the roll_number argument allows for remote exploitation. An exploit is public...