CVE-2019-11447

CVE-2019-11447 - PoC Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE. Installation Clone the repository and install the requirements. pip install -r requirements.txt Usage In order to upload an avatar you will require a CuteNews user account,...

Apache Druid - Server-Side Request Forgery

Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid.This issue affects all previous Druid versions.When using the Druid management proxy, a request tha...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

SillyTavern - Server-Side Request Forgery

SillyTavern versions up to and including 1.17.0 expose the /api/search/searxng endpoint, which accepts an attacker-controlled baseUrl parameter and uses it directly to build outbound server-side fetch requests. An authenticated low-privilege user can point baseUrl at an internal or loopback HTTP...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

CVE-2019-12840

CVE-2019-12840 RCE authentifié dans Webmin 1.910 - 'Mises à jour de paquets' Utilisation : 1- Configurez un écouteur netcat. 2- python3 exploit.py Remarques : Fournissez l'URL par exemple : http://:port Veuillez copier le cookie 'sid' depuis votre navigateur et fournissez-le pour que l'exploit...

CVE-2020-7246

إعداد المختبر: a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c يجب أن يكون خادم الويب متاحًا على http://127.0.0.1/index.php d حساب مُهيأ مسبقًا: البريد الإلكتروني:...

CVE-2026-42588

CVE-2026-42588 - Apache ActiveMQ Jolokia Remote Code Execution Exploit Schweregrad : 🔴 Hoch CVSS 4.0: 8.1 Schwachstellentyp : CWE-94 — Code Injection Betroffene Versionen : Apache ActiveMQ Voraussetzung : Erforderlich sind Web Console Anmeldedaten Standard admin:admin 📋 Inhaltsverzeichnis 漏洞概述 漏洞...

EUVD-2026-66719

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user with the global settings:read permission can create a survey menu entry containing attacker-controlled data. The value is stored in the...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 पथ ट्रैवर्सल और मनमाना फ़ाइल लेखन प्रमाणित यह रिपॉजिटरी CVE-2026-6815 के लिए एक प्रूफ ऑफ कॉन्सेप्ट PoC एक्सप्लॉइट रखती है, जो Casdoor में एक मनमाना फ़ाइल लेखन और पथ ट्रैवर्सल कमजोरी है। कमजोरी को संस्करण 3.54.1 में ठीक कर दिया गया है। आवश्यकताएँ हमलावर को...

CVE-2022-22916

CVE-2022-22916 CVE-2022-22916, O2OA RCE Esecuzione Remota di Comandi O2OA RCE Esecuzione Remota di Comandi CVE-2022-22916 O2OA è una soluzione open-source licenza AGPL per sistemi informativi aziendali, basata su architettura J2EE distribuita, con supporto per ufficio mobile e intelligente,...

analysis-and-poc-n8n-CVE-2025-68613

Panoramica n8n e CVE-2025-68613 n8n è una piattaforma di automazione dei flussi di lavoro utilizzata per integrare sistemi e servizi tramite flussi visivi ed espressioni JavaScript. CVE-2025-68613 è una vulnerabilità critica di Esecuzione Remota di Codice RCE , con CVSS 9.9 , che colpisce più...

CVE-2023-40028

استغلال CVE-2023-40028 PoC ثغرة رفع الروابط الرمزية في Ghost CMS تؤدي إلى قراءة ملفات عشوائية POC Image تفاصيل الثغرة CVE-2023-40028 هي ثغرة في Ghost CMS الإصدارات الأقدم من 5.59.1 ، حيث يمكن للمستخدمين الموثقين رفع روابط رمزية symlinks تؤدي إلى قراءة ملفات عشوائية على النظام المضيف. يمكن استغلال...

CVE-2017-16524

CVE-2017-16524 Descoberto por Omar Mezrag - 0xFFFFFF Produto Afetado Samsung Gravadores de Vídeo em Rede - Web Viewer 1.0.0.193 no Samsung SRN-1670D Fornecedor do Produto Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Tipo de Vulnerabilidade Vulnerabilidade de upload de arquivo...

CVE-2023-49974

CVE-2023-49974 Customer Support System 1.0 – Cross-Site-Scripting XSS-Sicherheitslücke im Feld/Parameter „contact“ auf der Seite „customerlist“ Beschreibung : Customer Support System 1.0 ist anfällig für gespeichertes XSS. In Version 1 des Customer Support Systems existiert eine...

SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE

SolarWinds Web Help Desk contains an unauthenticated AjaxProxy deserialization remote code execution vulnerability, letting attackers run commands on the host machine without authentication, exploit requires no special privileges. id: CVE-2025-26399 info: name: SolarWinds Web Help Desk 12.8.7 -...

CVE-2019-10999

D-Link एक्सप्लॉइट एक्सप्लॉइट डिवाइस के सर्वर, alphapd, में मौजूद है, जब यह उपयोगकर्ता को प्रदर्शित करने से पहले wireless.htm को प्रोसेस करता है। यदि URL में WEPEncryption प्रदान किया जाता है, तो इससे बफर ओवरफ्लो हो सकता है यदि मान 0x28 बाइट्स से अधिक लंबा हो। इस रूप का एक URL: root@kitploit:...

CVE-2026-71913

Multiple DrayTek VigorAP models contain a command injection vulnerability in the uploadsettings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted input...

EUVD-2026-64995

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service...

CVE-2026-71931

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the tftp_upgrade function. The root cause is insufficient filtering of the filename field before it is concatenated into a system command, allowing a remote attacker to execute arbitrary commands with roo...