EUVD-2026-70328

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-68860

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks...

CVE-2026-68860

Dell PowerProtect Data Manager (versions 20.2.0.0 and below ) is affected by a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker with high attack complexity and required user interaction could exploit this to launch phishing attacks , resulting in high confidentiali...

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

...

cve-2025-13486-vuln-setup

CVE-2025-13486 Vulnerable Test Environment One-shot Docker setup for testing ACF Extended RCE vulnerability. Quick Start root@kitploit: 1. Download plugins run once ./download-plugins.sh 2. Start environment docker-compose up -d --build 3. Wait 30 seconds for setup, then test nuclei -t...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Proof of concept Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ The python script abuses the upload function that is availible unauthenticated at /admin/files-upload/ The script locally creates a bin folder and a file named...

ethical-hacking-CVE-2011-2523

Ethical Hacking | Assessment 1 Practical Vulnerability Testing - CVE-2011-2523 vsftpd 2.3.4 Backdoor Module: - Ethical Hacking University: London Metropolitan University Programme: BSc Hons Cyber Security and Forensic Science Legal Disclaimer All activities were conducted in a controlled, isolate...

CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Slider Revolution Missing Authorization Scanner Professional mass scanner for CVE-2024-34444 affecting Slider Revolution WordPress plugin 6.7.0 Banner 🎯 Description CVE-2024-34444 is a Missing Authorization vulnerability in the Slider Revolution WordPress plugin versions 6.7.0...

CVE-2026-75604

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache Components. Demonstration Requirements Next.js =13.4 =16.0 16.3.3 Native...

hdwebmobile-photo-video-reviews

HDWebmobile Photo & Video Reviews A WooCommerce plugin that lets customers attach photos and short videos to their product reviews, shown right in the review list on the product page. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/ pending first submission Requires:...

nginx-cve-2026-42945-check

NGINX CVE-2026-42945 Local Checker Language: 中文 | English This repository provides two standalone local scripts for checking whether a Linux or Windows server has Nginx, OpenResty, or Tengine instances that may be exposed to CVE-2026-42945 related risk. The scripts are read-only. They do not run ...

CVE-2018-13379

CVE-2018-13379 - FortiGate SSL-VPN Path Traversal PoC Description Proof-of-Concept script for CVE-2018-13379, a critical path traversal vulnerability in Fortinet FortiGate SSL VPN web portal. This vulnerability allows unauthenticated attackers to download system files via specially crafted HTTP...

CVE-2026-11344-RCE

Vehicle Management System In PHP - Unauthenticated Remote Code Execution via File Upload in newdriver.php Vulnerability Information...

CVE-2026-74835

A flaw was found in the inets application HTTP server httpd. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted chunked request that fails to enforce a configured body-size limit. This can lead to memory exhaustion, causing a Denial of Service DoS on...

CVE-2026-84851

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated actor to craft Ion data that exhausts the native call stack and crashes the application using the library, resulting in a denial of service...

CVE-2025-32432

🔐 CVE-2025-32432 — Craft CMS RCE sin autenticación previa Ejecución remota de código sin autenticación previa en Craft CMS Descubierto y desarrollado porMohammed Idrees Banyamer 📌 Descripción general CVE-2025-32432 es una vulnerabilidad crítica de ejecución remota de código RCE sin autenticación...

CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ

InSAT MasterSCADA BUK-TS - Unauthenticated RCE CVE-2026-22553 | CVSS 9.8 Critical | Exploit Author Mohammed Idrees Banyamer 📝 Description InSAT MasterSCADA BUK-TS suffers from an Unauthenticated OS Command Injection vulnerability in the MMadmServ web interface. This flaw allows remote attackers t...

CVE-2026-54088-poc

CVE-2026-54088: Command Injection via Authentication Hook Shell Substitution Pre-Authentication RCE Description This repository contains a Proof of Concept PoC for CVE-2026-54088, a critical OS Command Injection vulnerability in File Browser versions = 2.63.5. The vulnerability exists in the Hook...

Tenda-F3-V4

Exploit del Router Tenda F3 y Descargador de Archivos Este proyecto es una herramienta para descargar varios archivos del router Tenda F3 v3/v4 a través de una vulnerabilidad sin autenticación CVE-2020-35391. Permite obtener el archivo de configuración, el registro del sistema y el volcado de la...

POC_CVE-2026-35037

CVE-2026-35037 Ech0 SSRF Lab This repository contains a local, isolated reproduction lab for CVE-2026-35037, an unauthenticated SSRF vulnerability in Ech0's GET /api/website/title endpoint. The lab uses a controlled local evidence server instead of cloud metadata or third-party infrastructure...