CVE-2026-111094

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible...

EUVD-2026-102147

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible...

CVE-2026-111094

In JetBrains TeamCity versions before 2026.2 , 2026.1.4 , and 2025.11.8 , a remote code execution (RCE) vulnerability exists. This is caused by a whitelist bypass within the build messages protocol . Exploitation details are not provided in the documents. Remediation involves updating to the patc...

EUVD-2026-102144

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

CVE-2026-111091

In JetBrains Junie CLI versions prior to 26.8.3 , an attacker could achieve code execution by leveraging an untrusted project's MCP server configuration . This vulnerability is associated with CWE-829 (Inclusion of Functionality from Untrusted Control Sphere). The risk is rated as HIGH with a CVS...

CVE-2026-111091

In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration...

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - Cross-site scripting XSS vulnerabilities in attendancereport Description : Cross Site Scripting vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the "page...

cisco-rce

CVE-2017-3881 Cisco IOS remote code execution This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp Description...

EUVD-2026-102142

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root...

CVE-2026-105474

A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root...

CVE-2026-105474

A server-side template injection vulnerability exists in SolusVM 2 up to version 2.0.0-44576 . This flaw allows remote authenticated users to achieve arbitrary code execution with root privileges. The vulnerability is associated with CWE-1336 (Improper Neutralization of Special Elements Used in a...

Magneto-PolyShell

Magento 2 RCE Exploit - Unauthenticated File Upload to RCE ⚠️ This tool is for educational and authorized security testing only. Unauthorized use against systems you do not own is illegal. This exploit targets a critical unauthenticated remote code execution RCE vulnerability in Magento 2 Adobe...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h for help $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Click ESC typed :x to save $ jhead yourfiles.jpg Example : site.com/youfiles.php?cmd=Command Here...

redis-exploitation

redis-exploitation CONFIG SET For educational purposes only Build $ docker build -t victim . Run $ docker run -d --name victim victim Attack $ docker exec -it victim bash root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 / redis-cli 127.0.0.1:6379 config set dir /var/spool/cron/ OK...

RCE-Exploit-Framework

RCE-Exploit-Framework This framework is designed to assist penetration testers or developers in understanding the mechanics of remote code execution RCE exploitation. Features Payload Generator : Supports the creation of custom payloads based on Python, Bash, and PHP. Exploit Executor : Delivers...

Alfa-Perl-RCE-ZoneH-Grabber-Python

Alfa-Perl-RCE-ZoneH-Grabber-Python Python2.7 These tools are open source, you can recode them but remember never to delete the author tools, and these tools are free, not for sale!!! Results Shell Depends on Your List !!! Here, Jenderal92 is not responsible for the misuse of tools that cause dama...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...

Webmin1.910_exploit

Webmin 1.910 Remote Code Execution Exploit Description: This repository contains a Python 3 script designed to exploit a remote code execution vulnerability in Webmin version 1.910. The script utilizes the sessionlogin.cgi endpoint to perform authentication and deploy a reverse shell payload,...

TryHackMe-Atlassian-CVE-2022-26134

TryHackMe | Atlassian, CVE-2022-26134 TryHackMe Atlassian CVE-2022-26134 Atlassian, CVE-2022-26134 An interactive lab showcasing the Confluence Server and Data Center un-authenticated RCE vulnerability. Task 1 Introduction Confluence | Your Remote-Friendly Team Workspace | Atlassian NVD -...

CVE-2026-65008

CVE-2026-65008 — Grav CMS 2.0.7 Authenticated RCE Proof-of-concept for CVE-2026-65008 : authenticated remote code execution in Grav CMS via unrestricted calluserfuncarray in Blueprint::dynamicData. A user with admin.pages or api.pages.write can plant a malicious form frontmatter. The payload then...