1188390 matches found
CVE-2026-114375
A path traversal vulnerability exists in the Files Rename API of leomoon-studios wiki-go up to version 1.9.1 . The flaw resides in the RenameFileHandler function within internal/handlers/files.go, where manipulating the currentPath/newName argument allows for remote path traversal. Public exploit...
CVE-2024-47176
CVE-2024-47176 Vulnerability Scanner for CUPS: CVE-2024-47176 Mass Scanner for CUPS Vulnerability CVE-2024-47176 is a specialized tool designed to detect the presence of the CVE-2024-47176 vulnerability across multiple systems running the Common Unix Printing System CUPS. This vulnerability, whic...
Atmail-exploit-toolchain
AtMail Email Server Appliance 6.4 - Exploit toolchain XSS CSRF RCE PacketStorm WLB-2020080010 Disclaimer: this exploit toolchain was inspired by EDB-ID 20009. Goal The goal of this exploit toolchain is to replace EDB-ID 20009. Pros of this toolchain over EDB-ID 20009 exploit: Simple to use Reusab...
CVE-2026-101516
A flaw was found in the OpenJDK Libraries component. An unauthenticated remote attacker can exploit this vulnerability over a network by submitting crafted data to affected application programming interfaces APIs, or through sandboxed environments that execute untrusted Java code. Successful...
CVE-2026-83387
A flaw was found in the Java Database Connectivity JDBC component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to exposed JDBC application programming interfaces APIs or by executing untrusted code. If successfully exploited...
SCAT
SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...
php2shell-poc
PHP2Shell 🔬 Two PHP vulnerabilities. One evidence trail...
Lilith
Lilith Free & Native Open Source C++ Remote Administration Tool for Windows Lilith is a console-based ultra light-weight RAT developed in C++. It features a straight-forward set of commands that allows for near complete control of a machine. Disclaimer The use of this software on any device that ...
CVE-2026-113005
A flaw was found in chromium-browser. A memory corruption vulnerability in the Bluetooth component allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment. To exploit this flaw, an attacker must entice a user into visiting a specially crafted HTML pa...
CVE-2026-113012
A flaw was found in chromium-browser. Improper input validation within the Graphics Processing Unit GPU component allows a remote attacker to potentially execute arbitrary code inside the browser's sandbox. An attacker could exploit this vulnerability by convincing a user to load a specially...
CVE-2026-113007
A flaw was found in chromium-browser. A memory corruption vulnerability in the Permissions component allows a remote attacker to execute arbitrary code outside the sandbox, which is an isolated security boundary designed to restrict untrusted programs. By convincing a user to open a specially...
CVE-2026-113004
A flaw was found in chromium-browser. A memory corruption vulnerability in the Sync component allows a remote attacker to achieve arbitrary code execution inside the browser's restricted security environment sandbox. An attacker can exploit this issue by enticing a user to visit a specially craft...
CVE-2026-112998
A flaw was found in chromium-browser. A memory corruption vulnerability in the Views user interface framework allows a remote attacker to execute arbitrary code within the application's sandbox an isolated security environment. To exploit this flaw, an attacker must convince a user to visit a...
CVE-2026-112996
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's restricted execution environment sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a memory corruption vulnerability in the Loader component...
CVE-2026-114374
The leomoon-studios wiki-go software, versions up to 1.9.1 , is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The flaw exists within an unknown function in the internal/handlers/metadata_api.go file, specifically affecting the fetch-metadata Endpoint component. An attacker can...
EUVD-2026-107539
A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadataapi.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The...
CVE-2025-49844
CVE-2025-49844 RediShell - Lab Environment A practical lab environment for testing and understanding the critical CVE-2025-49844 RediShell vulnerability in Redis. ⚠️ WARNING This is for educational purposes only! Only use on systems you own or have explicit permission to test Never expose to the...
selenium-node-takeover-kit
Metasploit Exploits This project has moved. To get the latest version, pull from https://codeberg.org/JonStratton/selenium-node-takeover-kit This combines some of the examples below to upload files to, download files from, and execute code on a Selenium node via the “COMMANDTYPE” param. RCE...
CVE-2026-27180-MajorDoMo-unauthenticated-RCE
MajorDoMo RCE CVE-2026-27180 Unauthenticated Remote Code Execution via Update URL Poisoning in MajorDoMo CWE-494 – Download of Code Without Integrity Check Impact : Full server compromise via webshell placed in web root Authentication Required : None Patch : PR 1177 📜 Description This repository...