690903 matches found
CVE-2026-63030-CVE-2026-60137-wp2shell-poc
wp2shell — WordPress REST API Time-Based Blind SQLi → RCE Proof‑of‑Concept Description pocwptot.py is a proof‑of‑concept PoC to exploit a time‑based blind SQL injection vulnerability on the WordPress REST API batch endpoint, and perform an escalation chain up to Remote Code Execution RCE...
CVE-2026-45332-PoC
CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...
CVE-2025-29471
Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin ▶️ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...
CVE-2026-8809
CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to 'acfpostid' Parameter This critical security vulnerability CVSS 9.8 affects all versions of the popular WordPress plugin Advanced Custom Fields: Extended ACF Extended from...
react-ssr-vulnerability
CVE-2025-55182 - React Server Components RCE POC This is POC for educational and security research purposes only. This vulnerability has been patched in the latest versions of the affected packages. Use this tool only on systems you own or have explicit permission to test. I am not liable for any...
CVE-2021-3156-Baron-Samedit
CVE-2021-3156 – Baron Samedit Heap-Based Buffer Overflow in sudo | Exploitation & Mitigation Analysis Overview CVE-2021-3156, known as Baron Samedit , is a heap-based buffer overflow vulnerability in the sudo program. It allows any unprivileged local user to gain root privileges on vulnerable...
CVE-2019-9624
CVE-2019-9624 Authenticated RCE for Webmin 1.9.0 Webmin 1.900 Authenticated RCE - CVE-2019-9624 Exploit 1. Vulnerability Description CVE-2019-9624 is an authenticated Remote Code Execution RCE vulnerability in Webmin versions up to 1.900. It allows an administrative user to execute arbitrary...
CVE-2015-1925.RCE
CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...
Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914
Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure Networking Privilege Escalation Exploit CVE‑2025‑54914 September 4, 2025 By Mark Mallia 1. Executive Summary On September 4, 2025 Microsoft’s Azure Networking services received a critical security advisory that documents a...
React2Shell
@React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React Server Remote Code Execution RCE Exploit █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ MAGENTA Next.js/React...
openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:22132-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-RU-2026:22132-1 advisory. Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a...
PT-2026-121394
In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
ROS-20261022-73-0049
Vulnerability in the function railmain.c:railserverhandlemessages of the RDP client FreeRDP, related to buffer overflow, allowing an attacker to trigger a service failure...
ROS-20261022-73-0069
A vulnerability exists in the httpproxyconnect function, due to the introduction of a CONNECT request by the RDP client FreeRDP. This vulnerability is related to the introduction of HTTP proxy requests/headers in the proxy server, allowing an attacker to execute arbitrary requests...
ROS-20261022-73-0087
A vulnerability in the planardecompressplanerle function of the RDP client FreeRDP, related to reading beyond the allowed range, allows a malicious actor to cause a service failure on the client side when encountering an unmatched page...
PT-2026-120927
A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather...
ROS-20261022-73-0079
Vulnerability in the httpresponserecvbody function of the RDP client FreeRDP, related to insufficient validation of input data, allows attackers to trigger a service failure on the client side...
ROS-20261022-73-0009
The vulnerability of the serialprocessirpdevicecontrol function in the channels/serial/client/serialmain.c file of the RDP client FreeRDP is related to an uncontrolled and exploitable flaw. Exploiting this vulnerability could allow a remote attacker to cause service failure...
PT-2026-121391
A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input...