CVE-2026-102637

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to re...

CVE-2026-104349

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-102636

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

CVE-2023-0297

CVE-2023-0297 RCE in pyload prior to 0.5.0b3.dev31. Disclaimer: This script lead to unauthorized access or control of a remote system; only use it if you have explicit permission from the system owner before proceeding...

CVE-2026-1337-AI-Coding-Assistant-Prompt-Injection-to-Sandbox-Escape

CVE-2026-1337 – AI Coding Assistant Prompt Injection to RCE 📖 Overview A prompt injection vulnerability in an AI-powered code review bot allows an attacker to inject arbitrary shell commands by manipulating the bot’s “fix” suggestion. The sanitizer uses a simple blacklist that is bypassed using...

CVE-2026-73570

🔴 CVE-2026-73570 — high-severity unauthenticated RCE ⚠️ Unauthenticated OS Command Injection → Remote Code Execution Zimbra Collaboration Suite · SNMP Notification Processing 🧠 Overview CVE-2026-73570 is a high-severity OS command injection vulnerability affecting specific configurations of Zimbra...

CVE-2021-40444-docx-Generate

CVE-2021-40444 docx Generate docx generating to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution 1. create blink .docx file. 2. add "Bitmap Image" object in "Insert/Object" menu. 3. save and unzip docx. 4. modify word/rels/document.xml.rels 5. modify word/document.xml 6. zip...

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076, a critical path traversal and arbitrary file write vulnerability in Atril/Xreader document viewers affecting MATE Desktop environments. The script generates a crafted EPUB payload with zip-slip paths targeting either SSH configuration or...

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG-free Redis RCE private Reliable remote code execution from a single crafted RESTORE on jemalloc Redis — noDEBUG command, no /proc, no gdb, no ROP, ASLR on. Runs the attacker's command as the redis process root in default images. 🔒 Private repository — authorized security...

CVE-2026-40897

CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...

GHSA-WF6J-7HVR-GR93 Hydra legacy target blacklist permits unsafe PyYAML loading

Summary Hydra's legacy target blacklist omits PyYAML's unsafe loading surfaces. If an application passes attacker-controlled targets and arguments to instantiate, a target such as yaml.unsafeload can execute Python code through a config-controlled YAML stream containing Python object-construction...

Hydra legacy target blacklist permits unsafe PyYAML loading

Summary Hydra's legacy target blacklist omits PyYAML's unsafe loading surfaces. If an application passes attacker-controlled targets and arguments to instantiate, a target such as yaml.unsafeload can execute Python code through a config-controlled YAML stream containing Python object-construction...

CVE-2026-63030-CVE-2026-60137

wp2shell Pre-Auth RCE PoC - CVE-2026-63030 + CVE-2026-60137 WordPress 6.9.0–6.9.4 / 7.0.0–7.0.1 For authorized penetration testing and security research only. Running this against systems without written authorization is illegal. The authors accept no liability for misuse. Overview wp2shell is a...

CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite

3. CVE-2026-9999 – Serverless Function Event Injection Path Traversal → Code Overwrite Overview A serverless platform that processes object storage events does not sanitize the object.key field, allowing an attacker to overwrite the function’s source code via path traversal. Severity: Critical RC...

CVE-2024-4577

CVE-2024-4577 Argument injection vulnerability in PHP INSTALL git clone https://github.com/gotr00t0day/CVE-2024-4577.git cd CVE-2024-4577 pip3 install -r requirements.txt USAGE Scan A Target python3 CVE-2024-4577.py -t https://160.153.61.66/ -c "" Scan a list of Targets python3 CVE-2024-4577.py -...

CVE-2026-104353 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execu...

CVE-2026-105780 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require us...

CVE-2026-105780

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability (CWE-863 ) that could lead to arbitrary code execution in the context of the current user. A low-privileged attacker can exploit this issue without user interaction. This vulnerability is rated CRITICAL with a CV...

EUVD-2026-111229

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require us...