CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — elFinder Command Injection PoC Command injection vulnerability in elFinder = 2.1.47 via the PHP connector component. Allows unauthenticated remote code execution as the web server user. How it works Uploads a valid JPEG with a malicious filename containing a shell command. Trigger...

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

GHSA-4RR5-89J8-MWWM Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

WindowsFirewallRuleset

Windows Firewall Ruleset !Alt Textcorporate firewall Table of Contents Windows Firewall Ruleset Table of Contents About Windows Firewall Ruleset Firewall rules Firewall framework The vision of this firewall License Requirements Requirements details I don't meet the requirements First time user...

CVE-2026-10036-speechbrain-rce

CVE-2026-10036: SpeechBrain Arbitrary Code Execution via CKPT.yaml Parsing Severity: High, CVSS 4.0 8.7 , CVSS 3.1 8.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected:...

react2shell-evolved

React2Shell Scanner High Fidelity Detection for RSC/Next.js RCE Scanner for detecting Remote Code Execution RCE vulnerabilities in React Server Components and Next.js applications. About React2Shell Scanner is a specialized tool for identifying Remote Code Execution RCE vulnerabilities in...

Exploiting-a-vulnerability-using-reverse-shell

Information Security Fundamentals — Spring 2026 Project Total Points: 20 | Deadline: No late submissions accepted Overview This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability CVE-2025-32433 in...

CVE-2026-94140

Versions of Rex through 1.16.1 for Perl are vulnerable to a Man-in-the-Middle (MitM) attack during remote rsync transfers. The root cause is that the sync command hardcodes the SSH option StrictHostKeyChecking=no , which persists even if users attempt to set options via set_openssh_opt. This allo...

CVE-2026-94140 Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no

Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync builds its ssh command with that option, for password authentication, for private-key authentication and for the fallback. Th...

CVE-2026-34197-Apache-ActiveMQ-RCE

Fixed the issue where the reverse shell failed because the command was not XML-escaped...

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability LEGAL DISCLAIMER AND TERMS OF USE The Proof of Concept PoC code and technical information provided in this document are intended solely for educational purposes, academic research, and authorized security testing...

CVE-2026-82987

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs...

CVE-2026-35031

CVE-2026-35031: Jellyfin Subtitle Upload Path Traversal to RCE -darkred?style=flat-square -orange?style=flat-square TL;DR A critical path traversal vulnerability in Jellyfin Media Server allows authenticated users with "Upload Subtitles" permission to upload files to arbitrary locations on disk. ...

CVE-2026-114380

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2026-114378

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-114377

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to path traversal. The...

CVE-2026-114379

A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argument outputpath causes file inclusion...

CVE-2025-69985

FUXA ≤ 1.2.8 Auth Bypass + RCE CVE-2025-69985 📜 Description This Python exploit targets CVE-2025-69985, a critical authentication bypass vulnerability in FUXA web-based SCADA/HMI software versions ≤ 1.2.8. By sending a crafted JSON payload with embedded Node.js code to the unprotected...

CVE-2026-114381 itsourcecode Online Cake Ordering System orderdetail.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...

CVE-2026-114381

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to a SQL injection vulnerability within an unknown function of the /orderdetail.php file. An attacker can perform a remote attack by manipulating the ID argument. The exploit has been publicly disclosed and may be utilized. No specifi...