cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...

CVE-2026-93995 Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

CVE-2026-102455

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2026-102454

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: Update to 5.3.1. CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader...

SUSE-SU-2026:4402-1 Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loade...

R2S_CVE-2025-55182

CVE-2025-55182 Scanner Vulnerability scanner for CVE-2025-55182 - Remote Code Execution in Next.js Server Actions. About CVE-2025-55182 Severity: Critical CVSS TBD Affected Versions: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impact: Remote attackers can execute...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repository contains a Python script that automates the exploitation of the CVE-2025-69516 SSTI vulnerability in Tactical RMM. It has been tested on version 1.3.1. Usage python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" Links...

Vulnerabilities in NetScaler ADC and NetScaler Gateway

Citrix has identified 8 vulnerabilities in NetScaler ADC and NetScaler Gateway. The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable: - Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 before version 14.1-73.37 - Citrix NetScaler ADC and Citri...

CVE-2026-102455 DigiWin｜EasyFlow .NET - Insecure Deserialization

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

EUVD-2026-89711

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2026-102455

The EasyFlow .NET software developed by Digiwin contains an Insecure Deserialization vulnerability. This flaw allows unauthenticated remote attackers to achieve arbitrary code execution on the server by submitting maliciously crafted serialized content. The provided documents do not specify a par...

Exploit-CVE-2025-68613

Exploit-CVE-2025-68613 Security Advisory: Critical Remote Code Execution Vulnerability in n8n CVE-2025-68613 A critical vulnerability has been identified in the n8n workflow automation tool that allows for arbitrary code execution. Authenticated users with permissions to create or edit workflows...

CVE-2025-57310

CVE-2025-57310 A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Base Score: 8.8 High...

CVE-2023-38890

CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution WriteUp CVE-2023-38890 – ExploitDB 50029...

CVE-2026-102454 DigiWin｜EasyFlow .NET - Arbitrary File Upload

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-102454 DigiWin｜EasyFlow .NET - Arbitrary File Upload

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-102454

The EasyFlow .NET software developed by Digiwin is susceptible to an Arbitrary File Upload vulnerability. A privileged remote attacker can exploit this flaw to upload and execute web shell backdoors , which leads to arbitrary code execution on the server. No specific affected versions, root cause...

EUVD-2026-89681

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE このリポジトリには、Adobe ColdFusion 2021 の RCE 脆弱性に対するエクスプロイトコードが含まれています。 エクスプロイトの説明 エクスプロイトは、JSP リバースシェルを含む POST リクエストを /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm に送信します。成功すると、シェルが...