1201061 matches found
ElasticSearch-CVE-2014-3120
ElasticSearch search Remote Code Execution CVE-2014-3120 POC Code to exploit CVE-2014-3120 Requirements: python Usage: python elasticcheck.py Example: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 Vulnerable 1 10.0.0.11:9201 Not Vulnerable 2 10.0.0.12:9201 Connection error Vulnerable...
CVE-2024-50970
CVE-2024-50970 Description A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...
CVE-2026-62765
A type confusion vulnerability exists in Microsoft Edge (Chromium-based) , where an access of resource using an incompatible type allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 7.5. No specific exploit details or in-...
CVE-2026-6009
⚠️ Disclaimer: This repository is for educational purposes and authorized security testing only. Do not use against systems you do not own or have explicit written permission to test. CVE-2026-6009 Proof of Concept Summary The Jaspersoft report library version = 7.0.3 is vulnerable to a remote cod...
CVE-2023-29017-reverse-shell
CVE-2023-29017-reverse-shell...
CVE-2026-25769
CVE-2026-25769 what is CVE-2026-25769 ? CVE-2026-25769 is a critical Remote Code Execution RCE vulnerability in Wazuh, the open-source security platform used for threat prevention, detection, and response. what is wazuh ? Wazuh is a free and open-source security platform used for threat preventio...
CVE-2026-22812-POC
OpenCode CVE-2026-22812 Exploiter Simple Python tols to check and exploit OpenCode vulnerability CVE-2026-22812. Install git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse concurrent-log-handler colorama Basic Usage Check...
cve-2022-42475-poc
CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Description CVE-2022-42475 is a heap-based buffer overflow vulnerability in the FortiOS SSL VPN service that allows unauthenticated attackers to remotely execute arbitrary code RCE via specially crafted HTTP requests...
cve-2019-5420-POC
Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...
redis-stack-CVE-2024-55656
CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow Remote Code Execution Vulnerability Title: Redis Stack RedisBloom Integer Overflow Remote Code Execution Vulnerability ZDI: ZDI-25-009 CVE: CVE-2024-55656 Credits: rick2600 and gqsilva CVSS: 8.8 HIGH Affected version: RedisBloom v2.6.12...
CVE-2022-24086-RCE-PoC
CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...
patch-CVE-2026-31337
Patch: CVE-2026-31337 Vulnerability Details CVE : CVE-2026-31337 Product : Ivanti Connect Secure Description : RCE via authentication bypass Severity : Critical CISA KEV : Yes confirmed exploited in the wild Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-08-15 Status| deployed...
spinnaker-poc
Spinnaker Vulnerability POCs Proof-of-concept demonstrations for CVE-2026-32604 and CVE-2026-32613, two 10.0 severity vulnerabilities in Spinnaker that allow for code execution and production cloud credential theft. Video walkthrough of how to use these POCS Technical blog with more details...
GHSA-M65P-9J7Q-6W33 MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
Summary On MLflow tracking servers running without authentication, which is the default for mlflow server, a remote attacker can read arbitrary files from the server’s filesystem by creating a model version tagged as a prompt whose source is a schemeless local path. The fix for CVE-2026-2614 in...
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a request-controlle...
ats-ipallow-method-case
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-ipallow-method-case ats-ipallow-method-case Class: Privilege leftover Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation HTTP/1 mixed-case methods skip the default ipallow.yaml deny o...
CVE-2022-0848-RCE
CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run, then get the shell through RCE...
ats-magick-unsigned
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · ats-magick-unsigned ats-magick-unsigned Class: File write Reach: Remote Apache Traffic Server 10.2.0 b1df7334 - Apache Software Foundation experimental magick runs ImageMagick ConvertImageCommand from ?magick=...
CVE-2022-30024
CVE-2022-30024 Tplink wr841 v10 rce exploit ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse, damage, or legal...
CVE-2026-5817-PoC
CVE-2026-5817: Docker Model Runner container-to-host RCE / Escape Any container on a Docker Desktop 4.40.0 to 4.67.x host can run code on the host with two HTTP requests. No socket mount, no --privileged, no caps. How Every container can reach Model Runner at model-runner.docker.internal with no...