CVE-2022-30024

CVE-2022-30024 Tplink wr841 v10 rce exploit ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse, damage, or legal...

phpggc

PHPGGC: PHP Generic Gadget Chains PHPGGC is a library of unserialize payloads along with a tool to generate them, from command line or programmatically. When encountering an unserialize on a website you don't have the code of, or simply when trying to build an exploit, this tool allows you to...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell thinkphp5.0.1 automatic getshell script Solves some minor issues encountered with thinkphp5.0.1, saving you the hassle of manual reproduction by building a dedicated script from scratch...

Fastjson-1.2.47-rce

Fastjson-1.2.47-rce version1.2.51 Remote Command Execution 1.2.24 "b":"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://localhost:1099/Exploit", "autoCommit":true Unknown version between 1.2.24-41...

discuz-ml-rce

discuz-ml-rce Sistemas afectados y versiones: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Causa de la vulnerabilidad: el sistema Discuz!ML no filtra el contenido del parámetro language recibido mediante 'l' en la cookie, lo que provoca concatenación de cadenas y la ejecución de código PHP. En el campo d...

Wp_Adning_Advertising_Shell_Upload

WpAdningAdvertisingShellUpload python 2.7...

CVE-2026-5027

🔥 CVE-2026-5027 - Langflow Path Traversal Arbitrary File Write to RCE Unauthenticated Remote Code Execution via File Upload -orange?style=for-the-badge 📌 Overview Langflow suffers from a critical path traversal vulnerability in the file upload endpoint POST /api/v2/files. An attacker can send a...

Log4Shell

Log4Shell CVE-2021-44228 ☠️ Log4Shell PoC CVE-2021-44228 Proof-of-concept exploit for the critical Log4Shell vulnerability in Apache Log4j ≤ 2.14.1, which allows remote code execution via JNDI injections. ⚠️ This PoC is for educational purposes and controlled testing in authorized environments...

Apache-Flink-Dashboard-rec

Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...

CVE-2025-10147

CVE-2025-10147 Podlove Podcast Publisher = 4.2.6 - Unauthenticated Arbitrary File Upload The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'moveasoriginalfile' function in all versions up to, and including, 4.2.6...

rust-cve-2025-55182-scanner

CVE-2025-55182 Scanner Rust A high-performance, concurrent vulnerability scanner written in Rust for detecting CVE-2025-55182 Next.js Server Actions RCE across multiple targets. 🚀 Features ⚡ High-performance Rust implementation 🧵 Multi-threaded scanning engine ⏱ Adjustable timeout & retry system ...

kernel: svcrdma: Reject inline replies that overflow the pull-up buffer

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

kernel: udp: fix potential use-after-free in tunnel segmentation

A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...

kernel: nfsd: initialize copy-notify stateid before publishing it

A flaw was found in the nfsd component of the Linux kernel. A use-after-free vulnerability exists due to improper initialization of the copy-notify state ID before its publication. A remote attacker could exploit this by sending a crafted OFFLOADCANCEL operation, leading to a race condition that...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...