630401 matches found
CVE-2023-50164-PoC
CVE-2023-50164 Apache Struts path traversal to RCE vulnerability - Proof of Concept This PoC has been made to test an RCE Remote Code Execution by exploiting the Apache Struts2 vulnerability. Build the image and run a container: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc && docker run...
reditrap
RediTrap Honeypot RediTrap is a minimal Redis honeypot tailored to spot early attempts to exploit CVE-2025-49844 "RediShell", the critical Remote Code Execution vulnerability described by Wiz Research. The exploit abuses a 13 year old use-after-free bug in the embedded Lua engine: Redis would sto...
CVE-2026-31281
CVE-2026-31281 Description Totara LMS is vulnerable to HTLM Injection. An attacker can inject malicious HTLM code in a message and send it to all the users in the application, resulting in executing the code and may lead to session hijacking and executing commands on the victim's browser CVSS 3...
SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit
= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...
Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation
= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView Privilege Escalation Origin Spoofing – Technical Research & Proof-of-Concept Author: Sastra Adi Wiguna Purple Elite Teaming Research Date: January 2026 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8...
CVE-2026-29053
CVE-2026-29053 Ghost CMS RCE via jsonpath/static-eval prototype chain. Info CVE : CVE-2026-29053 Affected : Ghost -p 1. Start listener: nc -lvnp 2. Upload malicious-theme.zip to Ghost Admin → Settings → Design 3. Create page with slug rce 4. Visit /rce/ References...
CVE-2026-20131
CVE-2026-20131 — Cisco Secure FMC Remote Code Execution Java Deserialization Severity: Critical CVSS 3.1: 10.0 CWE: CWE-502 — Deserialization of Untrusted Data Affected: Cisco Secure Firewall Management Center FMC Software Advisory: cisco-sa-fmc-rce-NKhnULJh Bug ID: CSCwt14636 Overview A...
CVE-2026-33017-Lab
CVE-2026-33017 — Langflow Unauthenticated RCE Lab Executive Summary CVE-2026-33017 is an Unauthenticated Remote Code Execution RCE vulnerability in Langflow where a public build endpoint accepts attacker-controlled flow data, allowing custom component code to be executed on the server. In this la...
CVE-2026-22738
CVE-2026-22738 Reproduction Environment Vulnerability Description CVE-2026-22738 is a SpEL Spring Expression Language injection vulnerability in Spring AI SimpleVectorStore that can lead to unauthenticated remote code execution RCE. Affected Versions Artifact| Affected Versions| Fixed Versions...
Terrminus-CVE-2026-2406
Terminus - CVE-2026-24061 Scanner & Exploitation Framework A security analysis engine for CVE-2026-24061 Telnet NEWENVIRON authentication bypass and privilege escalation vulnerability. Overview Terminus is a professional security research tool designed for authorized penetration testing and...
log4shell
Log4Shell This project is a demonstration of how the log4shell security vulnerability works. This vulnerability is described in CVE-2021-44228. The project is intended for educational purposes only. It should only be used on your own system and solely for experimental purposes. Any execution is...
CVE-2023-51126
CVE-2023-51126 FLIR AX8 up to 1.46.16 is vulnerable to command injection via /usr/www/res.php. VulnerabilityType Other command injection Vendor of Product FLIR Affected Component in /usr/www/res.php. The parameter value can inject the command and exec it. Attack Type Remote Impact Code execution...
cve-2024-21683-rce
cve-2024-21683-rce CVE-2024-21683 is a critical remote code execution RCE vulnerability affecting Atlassian's Confluence Server and Data Center. This vulnerability has a CVSS score of 8.3, placing it in the high-severity category. Attackers can exploit this vulnerability to execute remote code by...
CVE-2026-34444
CVE-2026-34444 CVE-2026-34444Sandbox escape and RCE due to incomplete attributefilter enforcement in getattr/setattr...
CVE-2021-3279
CVE-2021-3279 https://www.cvedetails.com/cve/CVE-2021-3279/...
CVE-2026-33147
CVE-2026-33147 CVE-2026-33147Stack-based Buffer Overflow in gmtremotedatasetid Summary A stack-based buffer overflow vulnerability was identified in the gmtremotedatasetid function within src/gmtremote.c. This issue occurs when a specially crafted long string is passed as a dataset identifier e.g...
CVE-2021-44529
CVE-2021-44529 Vendor Homepage: https://www.ivanti.com/ Software Link: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Version: CSA 4.6 4.5 - EOF Aug 2021 Execute python3 exploit.py Example python3 exploit.py 'https://x.x.x.x' 'ls' LDMGdeploy.pdf LDSupport.exe...
Ashwesker-CVE-2026-21440
🚨 CVE-2026-21440 — Critical Security Vulnerability 🧩 Summary CVE-2026-21440 is a critical path traversal vulnerability affecting the AdonisJS framework, specifically its multipart file upload handling. ⚠️ If exploited, attackers can write files anywhere on the server , potentially leading to remot...
S2-062
S2-062 CVE-2021-31805/s2-062 Batch Scanning and Exploitation Please comply with laws and regulations; unauthorized attacks on website systems are prohibited. Usage Batch Scan Mode python3 CVE-2021-31805.py -m scan -f 123.txt Command Execution Mode python3 CVE-2021-31805.py -u...