1324773 matches found
libXrender security update
An update is available for libXrender. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list X.Org X11 libXrender runtime library Security Fixes: libXrender: libXrende...
RLSA-2026:91267 Important: libXrender security update
X.Org X11 libXrender runtime library Security Fixes: libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats CVE-2026-88807 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE...
CVE-2021-2109
Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network...
CVE-2022-44830
Suggested description Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file. Additional Information Proof ...
CVE-2020-5902-Scanner
CVE-2020-5902-Scanner Automated F5 Big IP Remote Code Execution CVE-2020-5902 Scanner Written In Python 3 Vulnerability Description F5 released a Critical Remote Code Execution vulnerability CVE-2020-5902 on 30th June 2020 that affects several versions of Big IP. Attacker can easily exploit RCE &...
yara
!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...
mcpjam-to-root
β οΈ Disclaimer This repository is intended for authorized security research, penetration testing, and educational purposes only. Do not use the techniques described here against systems without explicit authorization. β‘ MCPJam β Root From MCPJam Inspector RCE to root β CVE-2026-23744, JupyterLab...
CVE-2023-21971_Analysis
CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - θ·³θ·³η³ tttang.com Vulnerability Overview Vulnerability in...
Flowise-CVE-2026-58057-exploit
Flowise CVE-2026-58057 - Windows Remote Code Execution Exploit -orange?style=for-the-badg...
CVE-2026-0770
CVE-2026-0770: Langflow execglobals Unauthenticated Remote Code Execution PoC CVE-2026-0770 an unauthenticated Remote Code Execution RCE vulnerability affecting Langflow. The flaw stems from improper input validation within the handling of the execglobals parameter provided to the /validate...
CVE-2019-19781
CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...
ColdFusionPwn
ColdFusionPwn Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12. Description The tool allows you to generate serialized AMF-payloads to exploit the missing input validation of allowed classes. For details see our blog post. Install Get the latest version of ysoserial. Get...
ShimMe
ShimMe Tools from the DEFCON 32 talk "SHIM me what you got - Manipulating Shim and Office for Code Injection" Office Injector - Invokes an RPC method in OfficeClickToRun service that will inject a DLL into a suspended process running as NT AUTHORITY\SYSTEM launched by the task scheduler service,...
CVE-2025-32433
Erlang/OTP SSH Remote Code Execution Vulnerability. The root cause is a flaw in the SSH protocol's message handling mechanism, allowing attackers to send connection protocol messages before authentication is complete. Notably, this vulnerability affects all Erlang/OTP versions running SSH server...
CVE-2025-32579
β οΈ CVE-2025-32579 - Critical RCE via Sync Posts Plugin WordPress π¦ Affects: Sync Posts 𧨠CVSS Score: 9.9 CRITICAL π CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H π§ Vulnerability Overview The Sync Posts WordPress plugin by SoftClever Limited is vulnerable to an Unrestricted File Upload...
CVE-2024-22274
CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the...
CVE-2026-27966--RCE-in-Langflow
π CVE-2026-27966 - Langflow RCE Exploit Tool All-in-One Exploitation Tool for CVE-2026-27966 π Description This tool is an all-in-one exploit for CVE-2026-27966, a Remote Code Execution RCE vulnerability in Langflow that allows an attacker to execute system commands remotely. CVSS Score: 9.8...
CVE-2023-38831-Exploit
CVE-2023-38831 WinRAR Exploit Generator Created by: technicalcorp This project contains a Python script that exploits CVE-2023-38831 , a vulnerability in WinRAR versions prior to 6.23. The exploit generates a malicious RAR archive that triggers the execution of arbitrary code when the victim open...
bigip-scanner
BIG-IP Scanner Determine the running software version of a remote F5 BIG-IP management interface. Developed with β€οΈ by the Bishop Fox Cosmos team. Description CVE-2022-1388, a critical vulnerability in the F5 BIG-IP management interface, allows an attacker to bypass authentication and remotely...
cve-2020-0688
cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...