The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the CrocoTime employee working time management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary codes.

The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CrocoTime employee attendance system, related to deficiencies in the authorization process, allows a violator to gain unauthorized access to protected information.

The vulnerability of the CrocoTime employee time management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-105123

The W (vincent-peugnet/wcms) content management system, version through 3.18.0 , is vulnerable to Remote Code Execution (RCE) and Arbitrary File Write via the Media Upload API. The root cause is an unvalidated path in the POST /api/v0/media/upload/[*:path] endpoint. Authenticated editors can expl...

Exploit for Interpretation Conflict in Wordpress

wp2shell-PoC ⚠ This tool is created solely for education...

CVE-2024-22891

Nteract PoC Une preuve de concept pour la vulnérabilité CVE-2024-22891. nteract 0.28.0 permet une vue web Electron via un lien Markdown, avec une exécution de code à distance résultante. Dans ce dépôt se trouve un exemple d'application vulnérable et une exploitation de preuve de concept POC de...

CVE-2022-26134

pip3 install -r requirements.txt utilisation: python3 exp.py url "cmd" exemple: python3 exp.py http://192.168.1.1/ whoami...

eval-stdin

Уязвимость Util PHP eval-stdin.php CVE-2017-9841 — это RCE-уязвимость в устаревшем eval-stdin.php. Этот эксплойт — просто автоматизация упомянутой уязвимости и всё ещё находится в разработке. Скрипт написан на Ruby 3.0.4 за 2 часа, протестирован на Kali linux, Arch Linux, Ubuntu minimal и Termux...

CVE-2025-29017

CVE-2025-29017 - 인터넷 뱅킹 시스템 2.0.0 프로필 사진 업로드를 통한 원격 코드 실행 설명 Code Astro Internet Banking System 2.0.0 에서 pagesviewclient.php의 profilepic 매개변수에 대한 파일 업로드 검증 부재 로 인해 원격 코드 실행RCE 취약점이 존재합니다. 공격자는 업로드 요청을 수정하여 보안 검사를 우회하고 임의 코드 실행 을 유발할 수 있습니다. 영향을 받는 구성 요소 pagesviewclient.php의 profilepic 매개변수 업로드 기능...

redis-stack-CVE-2024-55656

CVE-2024-55656 - Redis Stack - Vulnérabilité d'exécution de code à distance par dépassement d'entier dans RedisBloom Titre : Vulnérabilité d'exécution de code à distance par dépassement d'entier dans Redis Stack RedisBloom ZDI : ZDI-25-009 CVE : CVE-2024-55656 Crédits : rick2600 et gqsilva CVSS :...

MS15-034

MS15-034 MS15-034 POC La version actuelle du serveur IIS est une version vulnérable qui possède des vulnérabilités connues CVE-2015-1635, MS15-034, et l'exploitation de ces vulnérabilités expose à un risque d'attaque telle que l'exécution de code à distance ou l'écran bleu Blue Screen. Syntaxe de...

CVE-2016-6366

CVE-2016-6366 Dépôt public pour les améliorations de l'exploit EXTRABACON, une exécution de code à distance pour Cisco ASA écrite par l'Equation Group NSA et divulguée par les Shadow Brokers. Il contient un shellcode amélioré, un script de recherche d'offset LINA, un module Metasploit et...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - Le produit SearchBlox avant la version 9.2.1 est vulnérable à l'injection de macro CSV. Description du produit : SearchBlox simplifie la recherche d'entreprise pour les organisations complexes. Les outils intuitifs et intelligents de SearchBlox offrent une...

cve-2024-21534

POC - CVE-2024-21534 Jsonpath-plus vulnérable à l'exécution de code à distance RCE en raison d'une désinfection incorrecte des entrées Aperçu CVE-2024-21534 est une vulnérabilité critique présente dans les versions du package jsonpath-plus antérieures à la version 10.0.0. La vulnérabilité provien...

CVE-2025-37164-PoC

CVE-2025-37164 - PoC RCE non authentifiée HPE OneView Exploit Proof-of-Concept pour CVE-2025-37164, une vulnérabilité critique CVSS 10.0 d'exécution de code à distance non authentifiée dans HPE OneView. AVERTISSEMENT CE LOGICIEL EST FOURNI UNIQUEMENT À DES FINS ÉDUCATIVES ET DE TESTS DE SÉCURITÉ...