CVE-2024-34102

Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

F5-Big-IP-CVE-2022-1388

F5-Big-IP-CVE-2022-1388 CVE-2022-1388 F5 Big IP unauth remote code execution PoC Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2026-110111

Xen Orchestra versions prior to 6.9.0 are vulnerable to an improper access control flaw involving prototype pollution . An authenticated user can escalate privileges to global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. By directing the xo-ser...

CVE-2026-86063

Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who controls a plugin repository on a Gi...

EUVD-2026-100460

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-97781

A command injection vulnerability exists in Microsoft Office OneNote due to the improper neutralization of special elements used in a command. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a High severity (CVSS 8.8) and ...

CVE-2026-105016

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...

CVE-2026-105016

A heap-based buffer overflow exists in Microsoft QUIC , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.80 . Affected systems connected to public networks are at a higher risk, as actual abuse...

EUVD-2026-100459

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...

CVE-2026-97816

A Use after free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability has a CVSS 3.1 score of 9.8 and is classified as CRITICAL . Exploitation of this flaw does not require prior authentication or user interaction. While ...

CVE-2026-97814

A heap-based buffer overflow vulnerability exists in Windows Text Shaping , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS score of 9.80 and is characterized by low attack complexity, requiring no privileges or user interac...

CVE-2026-97815

A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL), indicating a high risk of impact on confidentiality, integrity, and...

CVE-2026-96113

A Heap-based buffer overflow and Numeric Truncation Error (CWE-122, CWE-197) exist in the DNS Server on Windows . This vulnerability allows an unauthorized attacker to achieve Remote Code Execution over a network. The vulnerability has a critical CVSS 3.1 score of 9.8, indicating high impact on c...

CVE-2026-97805

The Windows Partition Management Driver contains an out-of-bounds read vulnerability (CWE-125) caused by improper input validation (CWE-20). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9...

CVE-2026-105013

A deserialization of untrusted data vulnerability in Microsoft Office SharePoint allows an authorized attacker to achieve arbitrary code execution over a network. The impact of this vulnerability is rated as High with a CVSS score of 7.40 . Microsoft has released updates to address this issue, an...

EUVD-2026-100403

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-103575

A Use after free vulnerability exists in the Remote Desktop Client , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact includes high confidentiality, integrity, and availability, u...

CVE-2026-105005

An out-of-bounds write vulnerability exists in Windows Schannel , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-787 and has a CVSS v3.1 base score of 8.1 (High) . While the documents confirm the impact and root cause type, spe...