CVE-2022-26134

CVE-2022-26134 Confluence Pre-Auth Object-Graph Navigation Language OGNL Injection Confluence is a web-based workspace collaboration product that is developed by Atlassian. It can be deployed on-prem or as part of Atlassian Cloud. It consists of 3 key features: page, space and page tree. Page: Yo...

CVE-2024-36985

CVE-2024-36985 All the exploit codes are genetrated by gemini. Splunk admin role required. Splunkarchiver application enabled. You can also run below SPL in search to trigger the RCE. | copybuckets data=""providers": "pwnprovider": "command.arg.0":...

CVE-2026-113788

Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the ssh service in Lagoon core that would allow an attacker to execute arbitrary code which could lead to, among other things, elevated administrative permissions. It is mitigated by the fa...

CVE-2026-76466

A vulnerability in the database service feature of Cisco Expressway Series (Expressway-C and Expressway-E devices) allows an unauthenticated, remote attacker to execute arbitrary operating system commands as root . The root cause involves the use of persistent cookies and insufficient validation ...

CVE-2026-76466 Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary operating system commands as root. This vulnerability is due to the use of persistent cookies...

PHP2Shell: Why many websites had to go offline for emergency security updates

If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted warnings to install emergency updates and consider temporarily taking affected services offline until they can be patched. The...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Remote Code Execution Vulnerability Video demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Real Player G2 Control component contains a remote code execution vulnerability because it allows 'javascript:' URIs to be passed as the argument, which is...

CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE This repository contains a fully reproducible Proof-of-Concept and Nuclei exploit template for CVE-2021-3007, a critical PHP deserialization vulnerability in Zend\Http\Response\Stream laminas-http Nuclei exploit template ├── docker-compose.yml...

CVE-2026-114109

A flaw was found in uv. An attacker who convinces a user to install a malicious package can achieve arbitrary code execution. Because uv does not properly restrict entry point names, installing a crafted wheel package allows files to be written outside the intended directory, enabling an attacker...

CVE-2026-114097

A flaw was found in Dulwich. This vulnerability allows an attacker to achieve arbitrary code execution by tricking a user into running branch filtering operations on a specially crafted Git repository. Because temporary files persist between commit processing cycles, symbolic links created in...

CVE-2026-114096

A flaw was found in Dulwich. When checking out specific file paths, the application improperly follows symbolic links when creating or restoring files. By tricking a user into checking out files from a maliciously crafted repository, an attacker can write arbitrary files to the local filesystem,...

CVE-2026-113270

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into loading a specially crafted HTML page. This issue is caused by a use-after-free memory corruption vulnerability within the Internals component...

php2shell-audit

php2shell-audit php2shell-audit is a non-destructive exposu...

MAL-003

MAL-003: Groovy Security Bypass and Stored XSS in Apache OfBiz A Groovy RCE and XSS have been identified in Apache OfBiz = 18.12.05. Why no CVE? Apache OfBiz does not create CVEs for "post-auth attacks done using demo credentials, notably using the admin user" as mentioned on their security page...

Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products

Palo Alto Networks is aware of two critical vulnerabilities in PHP: CVE-2026-109618 and CVE-2026-109619. CVE-2026-109618 involves a remote code execution vulnerability where handling out-of-memory errors via longjmp leaves request memory uninitialized due to improper control flow management,...

MAL-011

MAL-011: Log4J Misconfiguration Allows Malicious JavaScript in Red Hat AMQ The Log4J component of the Redhat A-MQ application is misconfigured to allow the execution of arbitrary “Script” attributes in the Log4J config. If an attacker finds a way to modify the Log4J config used by A-MQ e.g. via...

coldfusion-amf

coldfusion-amf Coldfusion AMF PWN pwn http://localhost "nslookup burpcollab.net"...

php2shell-poc

PHP2Shell: a reproducible PHP request-lifecycle RCE lab...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

RP_Import_RCE

Real Player 'external::Import' Arbitrary file download, Directory Traversal Vulnerabilities leads to Remote Code Execution video demo: https://youtu.be/CONlijEgDLc Real Player uses Microsoft Internet Explorer functionality and exposes properties and methods through a special mean which is...