1330706 matches found
CentOS Linux 6 [TuxCare] Security Update: cpio Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793167254)
The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793167254 advisory. - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create T...
PT-2026-134919
Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state. The gcloud-auth login and application-default login commands send a state parameter with the authorization request, then...
PUB-A-514122945
In onvkUpdateDescriptorSetWithTemplateSized2GOOGLE of vkdecoderglobalstate.cpp, there is a possible way to leak host code pointers to a guest virtual machine due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is...
RockyLinux 9 : bind9.18 (RLSA-2026:93072)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93072 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP...
Debian dla-4875 : imagemagick - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4875 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4875-1 [email protected]...
ASB-A-365086157
In resolveContentProvider of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-486464711
In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-48907
CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...
CVE-2022-36804-ReverseShell
Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...
Nostromo_Python3
Nostrom RCE Python3 Exploit Code: Usage: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...
cdt-vulnsamba-deploy
CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...
CVE-2018-11776-FIS
CVE-2018-11776 is a security vulnerability in Apache Struts, a popular framework for developing web applications. This vulnerability allows attackers to carry out remote attacks by injecting malicious code into data fields of HTTP requests. This vulnerability has been widely exploited in...
CVE-2022-46169
Cacti | Auth Bypass | RCE | CVE-2022-46169 Cacti: Unauthenticated Remote Code Execution Exploit in Ruby Cacti Docker This is a dockerized application that is vulnerable to the Cacti RCE vulnerability CVE-2022-46169. Follow the link to get Cacti running...
KernelPatch
KernelPatch Patching and hooking the Linux kernel with only stripped Linux kernel image. | |/ / | | \ | | | | | ' // \ '| ' \ / \ | | / | / | ' \ | . \ / | | | | | / | / | | || | | | | ||\|| || ||||| ,|\|| || Obtain all symbol information without source code and symbol information. Inject...
CVE-2025-3248
CVE-2025-3248 ā Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code š Exploit Features š Remote & unauthenticated RCE š No authentication required š Python3 one-liner script šØ Colorized terminal...
CVE-2022-24086-RCE-PoC
CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being āexploited in the wild in very limited attacksā received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...
CVE-2026-0770
CVE-2026-0770 Overview This tool is used to test the vulnerability CVE-2026-0770 in the Langflow application. It leverages the /api/v1/validate/code endpoint to perform Remote Code Execution RCE. Developer: Ohang Thanks to: @C4p333 Purpose: Security Research & Educational Use Installation Termux...
study-CVE-2025-55182
CVE-2025-55182 Study A repository for learning about the Remote Code Execution RCE vulnerability in React Server Components. š“ Warning For educational purposes only. Using it against others' systems without permission is illegal. š Vulnerability Overview Item| Description ---|--- CVE ID|...
CVE-2025-24813
šØ CVE-2025-24813 ā Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. š„ This exploit demonstrates how an attacker...
CVE-2017-7269-Echo-PoC
CVE-2017-7269 Remote Code Execution Echo Verification Our team's analysis report on the CVE-2017-7269 vulnerability: https://ht-sec.org/cve-2017-7269-vulnerabilities/ The default PoC only launches calc.exe. Now it has been modified to respond to requests. The command format is:...