CVE-2019-16278

CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - Remote Code Execution...

ezviz_lan_rce

ezvizlanrce Este repositorio contiene las diapositivas y los vídeos de prueba de concepto de la charla SADProtocol goes to Hollywood , presentada en DEF CON 31 Hardware Hacking Village. También puedes encontrar la imagen de docker para compilar binarios que se ejecutan en la cámara y los exploits...

CVE-2026-35273

CVE-2026-35273 This Security Alert addresses vulnerability CVE-2026-35273 in Oracle PeopleSoft PeopleTools. Oracle PeopleSoft Enterprise Applications customers may also be affected by this vulnerability. This vulnerability is remotely exploitable without authentication. If successfully exploited,...

CVE-2026-42533

CVE-2026-42533 — nginx map/regex capture clobbering tracking site Source for the CVE-2026-42533 patch-status tracker: a single-page site recording which distributions have shipped a fix for the nginx map/regex capture-clobbering heap overflow. Where the facts live Everything about the bug —...

cisco-CVE-2023-31488

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Email to zero click RCE as root - Remote Code Execution/Memory Corruption/ROP-chain CVE: CVE-2023-31488 Timeline: Discovered - ly1g3...

CVE-2026-53753-Crawl4AI-RCE

CVE-2026-53753 — Crawl4AI Unauthenticated Remote Code Execution AST Sandbox Escape Pre-authentication RCE in Crawl4AI.read — returning the command's output in-band in the JSON response...

CVE-2021-3129

CVE-2021-3129 CVE-2021-3129-Laravel Debug mode remote code execution vulnerability Affected versions and conditions Laravel = 8.4.2 Ignition 2.5.2 Environment setup docker pull vulhub/laravel:8.4.2 exp usage Download and execute in the same directory as exploit.py: git clone...

WSO2RCE

WSO2RCE The CVE-2022-29464 affects some WSO2 products such as WSO2 API Manager and WSO2 Open Banking , allowing arbitrary file upload and remote code execution. Affected Products: WSO2 API Manager 2.2.0, up to 4.0.0 WSO2 Identity Server 5.2.0, up to 5.11.0 WSO2 Identity Server Analytics 5.4.0,...

CVE-2025-14174-Poc

CVE-2025-14174 PoC Exploit Overview This repository contains a fully functional Proof-of-Concept PoC exploit for CVE-2025-14174 also tracked as EUVD-2025-203113, a critical memory corruption vulnerability in the ANGLE graphics engine. The flaw stems from improper restriction of operations within...

CVE-2026-48962

Summary An eval injection vulnerability in File::GlobMapper::getFiles allows any attacker who can control the output fileglob argument passed to IO::Compress::Gzip::gzip, IO::Compress::Zip::zip, or any sibling function to execute arbitrary Perl code in the context of the running process. No...

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file writes and enabling remote code execution. Details Archive entry names are used to construct filesyste...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow

A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...

Important: Red Hat Security Advisory: gstreamer1-plugins-base security update

An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CVE-2025-5961

CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...

uaf-2023-28205

CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability This vulnerability affects Apple WebKit and can be exploited through maliciously crafted web content, potentially allowing arbitrary code execution in the context of the WebKit process. The affected WebKit build analyzed in this repository...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Remote Code Execution via H2 Database RUNSCRIPT in Apache NiFi = 1.21.0 Vulnerability Apache NiFi ships with an H2 database JAR bundled by default. The DBCPConnectionPool controller service can be configured to use this H2 driver. H2 supports a RUNSCRIP...

CVE-2023-50564

CVE-2023-50564 📌 Description This exploit allows an authenticated admin in Pluck CMS v4.7.18 to upload a malicious ZIP module containing a PHP shell, resulting in remote code execution RCE. ⚙️ Features Authenticates to the target using a valid username and password Automatically creates a ZIP...

guardskill

GuardSkill A repository can make your coding agent run code the moment it opens the folder. GuardSkill checks for that before you do. root@kitploit: npx guardskill . Read-only. No network calls, no telemetry, no configuration, no account, no dependencies. It reads git configuration and hook...

CVE-2024-34361-Pi-Hole-SSRF-to-RCE

CVE-2024-34361 Pi-hole Remote Code Execution SSRF to RCE Description This repository contains an exploit for CVE-2024-34361, a critical vulnerability CVSS 8.6 discovered in Pi-hole, a DNS sinkhole widely used to block advertisements and tracking domains at the network level. The vulnerability...