CVE-2026-105220 Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file,...

CVE-2026-105220

Twine 2 Desktop (versions through 2.12.0 ) is vulnerable to Arbitrary Code Execution due to a cross-site scripting (XSS) flaw in the importStories() function. The root cause is a failure to properly sanitize markup during the import of story files, which allows malicious scripts to execute within...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS 保存型XSS v6.7 作成者: Sergio 説明: Quick CMS v6.7 のクロスサイトスクリプティング XSS の脆弱性により、ローカル攻撃者は、Languages メニューの Front and back end - Pages に対して、細工されたスクリプトを介して任意のコードを実行できます。 攻撃ベクトル: スクリプティング - 「Languages- Front and back end」の Pages への入力のサニタイズ処理に脆弱性があり、ユーザーが Web ページにアクセスした際に実行される JavaScript コードを注入できます。...

CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. PoC: git clone...

CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS 格納型XSS v.9.2.1 作成者: Sergio 説明: ConcreteCMS v.9.2.1 には、ローカルの攻撃者が「SEO & Statistics」のヘッダーおよびフッタートラッキングコードに細工したスクリプトを注入することで任意のコードを実行できる、複数のクロスサイトスクリプティング（XSS）脆弱性が存在します。 攻撃ベクトル: スクリプティング。「SEO &...

CVE-2024-46209

Redaxo Security Research CVE-2024-46209, CVE-2024-46210 Redaxo CMS v5.17.1 security research Completed at 09 August 2024 Contains detailed description of: CVE-2024-46210 - Stored Cross-Site Scripting via file Upload in MediaPool module CVE-2024-46209 - Authenticated arbitrary code execution...

CVE-2024-23692

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 Overview POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticat...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 This vulnerability is a Prototype Pollution vulnerability found in Kibana. Exploiting this vulnerability can lead ...

CVE-2019-9766

CVE-2019-9766 Exploiting the buffer overflow vulnerability in Free MP3 CD Ripper version 2.6, by constructing a specially crafted MP3 file, when the attacker uses the player to play the audio file, the audio file bait exploits the buffer overflow vulnerability to execute arbitrary code...

CVE-2021-22204

CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...

CVE-2010-1240

CVE-2010-1240 - Embedding backdoor into a PDF ⚠️ For educational and authorized security research purposes only Description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog,...

printix-CVE-2022-29554

CVE-2022-29554 Simple Release | Print Friendly A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to...

CVE-2009-4623

CVE-2009-4623 Advanced Comment System 1.0 リバースシェル Advanced Comment System 1.0 における複数のPHPリモートファイルインクルードの脆弱性により、リモートの攻撃者が advancedcommentsystem/ ディレクトリ内の 1 index.php および 2 admin.php に対して ACSpath パラメータにURLを含めることで任意のPHPコードを実行できる可能性があります。注: この脆弱性は、管理者が install.php のインストール手順に従っていない場合にのみ発生する可能性があります。...

turing-machine

Arbitrary Code Execution in the Universal Turing Machine This is an implementation of the Universal Turing Machine as presented in Minsky, Computation: Finite and infinite machines, 1967, Chapter 7. The default input to the simulated machine is an exploit that achieves arbitrary code execution. R...

CVE-1999-1053-PoC

CVE-1999-1053 Proof-of-Concept Exploit Background This Proof-of-ConceptPoC exploit is inspired from a CTF web challenge called CVE 1999 in HKCERT CTF 2022. Writeup link Information Description: In Matt Wright Guestbook The Matt Wright guestbook.pl = v2.3.1 CGI script contains a flaw that may allo...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a crafted payload in to the Global Content Blocks in the Administration Menu. Attack Vectors:...

CVE-2017-11882

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

cloudpanel-2.4.2-CVE-2024-44765-recovery

CVE-2024-44765 は、MGT-COMMERCE GmbH CloudPanel バージョン 2.0.0 から 2.4.2 における不適切な認可（アクセス制御の設定ミス）の脆弱性です。 1. 各フォルダの指示に従ってください（これはローカルで行う必要があります） 2. パスワードとアクセス権をリセットする for root $ sudo passwd root while for users $ getent passwd | grep -vE "nologin|false" | cut -d: -f1 $ sudo passwd 3. 不正なアクセスを削除する $ geten...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC CVE-2025-0411 Details "This vulnerability CVSS SCORE 7.0 allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...