2742 matches found
CVE-2026-42588
CVE-2026-42588 - Apache ActiveMQ Jolokia Remote Code Execution Exploit Severity : 🔴 High CVSS 4.0: 8.1 Vulnerability Type : CWE-94 — Code Injection Affected Versions : Apache ActiveMQ Prerequisites : Requires Web Console authentication credentials default admin:admin 📋 Table of Contents...
CVE-2023-40028
Exploit PoC CVE-2023-40028 Vulnerabilidad de Carga de Enlace Simbólico en Ghost CMS que lleva a Lectura Arbitraria de Archivos Imagen del PoC Detalles de la Vulnerabilidad CVE-2023-40028 es una vulnerabilidad en Ghost CMS versiones anteriores a 5.59.1 , donde usuarios autenticados pueden cargar...
SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE
SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...
Apache Druid - Server-Side Request Forgery
Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid.This issue affects all previous Druid versions.When using the Druid management proxy, a request tha...
Chef Automate < 4.13.295 — SQL Injection
In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...
SillyTavern - Server-Side Request Forgery
SillyTavern versions up to and including 1.17.0 expose the /api/search/searxng endpoint, which accepts an attacker-controlled baseUrl parameter and uses it directly to build outbound server-side fetch requests. An authenticated low-privilege user can point baseUrl at an internal or loopback HTTP...
Wipro Holmes Orchestrator 20.4.1 - Information Disclosure
Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...
CVE-2023-49974
CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...
CVE-2017-16524
CVE-2017-16524 Descubierto por Omar Mezrag - 0xFFFFFF Producto afectado Grabadores de red Samsung - Web Viewer 1.0.0.193 en Samsung SRN-1670D Proveedor del producto Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Tipo de vulnerabilidad Vulnerabilidad de carga de archivos sin...
CVE-2020-7246
搭建实验室： a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c Web 服务器应可通过 http://127.0.0.1/index.php 访问 d 预配置账户： 邮箱：[email protected] 密码：developer1 漏洞利用： 使用旧的 python2 漏洞利用脚本...
EUVD-2026-76873
vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...
CVE-2019-12840
CVE-2019-12840 RCE autenticado en Webmin 1.910 - 'Package Updates' Uso : 1- Configure un listener de netcat. 2- python3 exploit.py Notas: Proporcione la URL, por ejemplo: http://:port Copie la cookie 'sid' de su navegador y proporciónela para que el exploit funcione...
CVE-2019-11447
CVE-2019-11447 - 概念验证 利用CuteNews 2.1.2在上传头像图片时文件上传检查不严导致RCE。 安装 克隆仓库并安装依赖。 pip install -r requirements.txt 用法 要上传头像，你需要一个CuteNews用户账户，不一定要是管理员账户。 CVE-2019-11447.py URL USERNAME PASSWORD 示例： CVE-2019-11447.py http://localhost/CuteNews/index.php USERNAME PASSWORD...
analysis-and-poc-n8n-CVE-2025-68613
Overview n8n and CVE-2025-68613 n8n is a workflow automation platform used to integrate systems and services through visual flows and JavaScript expressions. CVE-2025-68613 is a critical Remote Code Execution RCE vulnerability, with CVSS 9.9 , affecting multiple versions of n8n. The flaw occurs i...
CVE-2026-86751
Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax in checkout acceptance notes that survive HTML escaping, are expanded ...
wordpress-skelersecurity-core-security-CVE-2026-63030
SkelerSecurity Core Security Plugin Una mitigación temporal y enfocada para el acceso no autenticado al endpoint de la API REST Batch de WordPress Core. Resumen SkelerSecurity Core Security Plugin exige autenticación antes de que WordPress procese solicitudes a la ruta de la API REST Batch de Cor...
Linux Distros Unpatched Vulnerability : CVE-2026-82059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal...
PT-2026-89173
Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...