CVE-2026-95675

D-Link DAP-1360 firmware version 6.14 and earlier contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted requests to the device's web management interface without valid credentials. Attackers can fully...

CVE-2019-7609-KibanaRCE

CVE-2019-7609-KibanaRCE Minor changes were made to the CVE to make it compatible with Python 3. cve-modific.py Here are the modifications: In the getkibanaversion function, the line match = re.findallpattern, r.content was updated to match = re.findallpattern, r.text. This change was made to use...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 Threat Analysis Microsoft MSDT Remote Code Execution zero-day — active exploitation investigation by MUHAMMAD ZAWAR KHATTAK 🔗 View Full Writeup → 🧪 Scenario On a Friday evening, the team was alerted with a new RCE vulnerability actively being exploited in the wild. I was...

CVE-2026-48908-joomla-sp-page-builder-detection

CVE-2026-48908 — Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...

CVE-2026-65130

The NVIDIA Infrastructure Controller for Linux is vulnerable to OS command injection (CWE-78) due to improper neutralization of special elements. An attacker with high privileges could exploit this to achieve code execution , data tampering , denial of service , and information disclosure . This ...

EUVD-2026-84416

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65128

The NVIDIA Infrastructure Controller for Linux is vulnerable to an SQL injection (CWE-89). An attacker could exploit this flaw to achieve code execution , data tampering , denial of service , and information disclosure . This vulnerability affects versions 0 to 1.9 . To remediate this issue, user...

EUVD-2026-84414

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65125

The NVIDIA Infrastructure Controller for Linux is vulnerable to a flaw where an attacker could cause external control of a file name or path (CWE-73). Successful exploitation of this vulnerability could result in code execution , escalation of privileges , data tampering , and denial of service ....

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Penetration Testing Writeup Author: Amirbek Raxmatullayev @americo444 Date: 2026-06-17 Platform: VulnHub Difficulty: Beginner Objective: Gain root access 1. Environment Setup Component| Details ---|---...

CVE-2026-56291

Auto Escaneo de Versión & Exploit CVE-2026-56291 POC Joomla Subida Arbitraria de Archivos no Autenticada que lleva a RCE en Balbooa Forms FOFA / Shodan FOFA: body="combaforms" Shodan: http.html:"baforms"...

CVE-2020-23583

CVE-2020-23583 OPTILINK E-PON "MODEL NO: OP-XT71000N" con "HARDWARE VERSION: V2.2"; y "FIRMWARE VERSION: OPV3.3.1-191028" EJECUCIÓN REMOTA DE CÓDIGO encontrada en "OPTILINK OP-XT71000N". El problema ocurre cuando el atacante envía un código arbitrario en "/diagpingadmin.asp" a la interfaz...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2021-42171

CVE-2021-42171 Subida de archivos para ejecución remota de código en Zenario CMS 9.0.54156 https://minhnq22.medium.com/file-upload-to-rce-on-zenario-9-0-54156-cms-fa05fcc6cf74 root@kitploit: Server test Distributor ID: Ubuntu Description: Ubuntu 21.04 Release: 21.04 Codename: hirsute...

CVE-2025-53694-to-CVE-2025-53691

Sitecore CVE Chain Exploits This repository contains proof-of-concept exploits for a critical vulnerability chain in Sitecore Experience Platform XP versions up to 10.4.1. Vulnerabilities CVE-2025-53694: Information Disclosure CVE-2025-53693: Cache Poisoning CVE-2025-53691: Remote Code Execution...

CVE-2026-65179

NVIDIA NeMo Speech is affected by a vulnerability in the TabularTokenizer class, where the software deserializes untrusted, attacker-controlled .pkl files using pickle.load() without sufficient validation (CWE-502 ). Successful exploitation can lead to code execution , data tampering , denial of ...

EUVD-2026-84406

NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it deserializes an untrusted, attacker-controlled .pkl file via pickle.load without validation. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information...

CVE-2026-65178

NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a maliciously crafted modelconfig.yaml can inject unsafe parameters. A successful exploit of this vulnerability may lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65111

NVIDIA NeMo Speech for all platforms is affected by a code injection vulnerability (CWE-77) where malicious input from an attacker can lead to code execution , information disclosure , and data tampering . The vulnerability impacts versions 0.0 to 2.9 across all platforms. To remediate this, user...

EUVD-2026-84404

NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...