gstreamer-plugins-good: GStreamer: Remote Code Execution via Use-After-Free in rtpsbcdepay

A flaw was found in GStreamer. This use-after-free vulnerability in the rtpsbcdepay element, specifically during the processing of Real-time Transport Protocol RTP payload elements, allows a remote attacker to execute arbitrary code. The issue arises from a lack of validation for an object's...

gstreamer-plugins-good: GStreamer: Remote code execution via MRF file parsing

A flaw was found in GStreamer. This out-of-bounds write vulnerability occurs during the parsing of MRF files due to improper validation of user-supplied data. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file. Successful exploitatio...

CVE-2026-22812

CVE-2026-22812 Overview A Python exploitation tool for OpenCode Remote Code Execution RCE vulnerability affecting versions v1.0.216. This tool provides multiple attack vectors including command execution, file read/write, file upload/download, and interactive shell. Disclaimer ⚠️ FOR AUTHORIZED...

CVE-2026-0770

🚀 CVE-2026-0770 – Langflow RCE execglobal PoC Remote Code Execution vulnerability in Langflow 📌 Affected Software This vulnerability affects: Langflow 🧠 Vulnerability Overview CVE-2026-0770 is a Remote Code Execution RCE vulnerability in the: /api/v1/validate/code endpoint. When AUTOLOGIN=true an...

CVE-2021-22204

CVE-2021-22204 A complete PoC for CVE-2021-22204 exiftool RCE...

CVE-2026-23744-script

A script for CVE-2026-23744, which exploits MCPJam Inspector versions = 1.4.2. Based off the curl command used here: https://github.com/advisories/GHSA-232v-j27c-5pp6 Make sure your /etc/hosts file is correct and points to the domain/vhost of the target...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For Linux MacOS Windows CVE-2026-24061 Telnet RCE 1.9.3 = GNU Inetutils = 2.7 Usage: go-telnet-exploit -p Check Exploit...

CVE-2025-59287

CVE-2025-59287 WSUS Vulnerability Reproduction CVE-2025-59287 — Injecting WolfShell Wolverine Forward Memory Shell Overview CVE-2025-59287 exploits a logic flaw in WSUS-related components to inject a WolfShell memory shell into the target server. When an administrator opens the WSUS console...

wasm2c-tableflip

Escapada de sandbox wasm2c: el módulo invitado ejecuta un comando de shell en el host Lee el blog: trustsig.eu/blog wasmrtallocatefuncreftable en wasm2c/wasm-rt-impl-tableops.inc establece table-size a partir del número de elementos declarado por el módulo y luego ignora el resultado de calloc...

CVE-2026-5027

🔥 CVE-2026-5027 - Langflow Path Traversal Arbitrary File Write to RCE Unauthenticated Remote Code Execution via File Upload -orange?style=for-the-badge 📌 Overview Langflow suffers from a critical path traversal vulnerability in the file upload endpoint POST /api/v2/files. An attacker can send a...

CVE-2026-15748

CVE-2026-15748 — Forminator Forms: subida arbitraria de archivos sin autenticación → RCE CVSS 9.8 Crítico · Afectado: Forminator = 1.56.1 · Parcheado: 1.56.2 Investigador: daroo Wordfence Bug Bounty, $2,048 · 600k instalaciones activas Informe:...

CVE-2026-28134

CVE-2026-28134 Exploitation Report JetEngine = 3.7.2 — Authenticated Contributor+ Remote Code Execution via Twig SSTI Date: March 11, 2026 CVSS Score: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Plugin: JetEngine = 3.7.2 Plugin Slug: jet-engine CVE: CVE-2026-28134...

CVE-2025-24893_Analysis

CVE-2025-24893 - XWiki SolrSearch SSTI to unauthenticated RCE A self-contained Docker lab that reproduces CVE-2025-24893, a Server-Side Template Injection in XWiki's SolrSearch RSS feed that leads to unauthenticated remote code execution. It runs the vulnerable version 15.10.10 and the patched...

CVE-2026-41089

CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

CVE-2024-4040-CrushFTP-server

CVE-2024-4040-CrushFTP-server CrushFTP es un servidor de transferencia de archivos propietario, multiprotocolo y multiplataforma. CVE-2024-4040 : una vulnerabilidad de inyección de plantillas del lado del servidor en CrushFTP en todas las versiones anteriores a 10.7.1 y 11.1.0 en todas las...

CVE-2025-62593-PoC

CVE-2025-62593 — Ray Ejecución Remota de Código sin autenticación Prueba de concepto para CVE-2025-62593 , una vulnerabilidad de Ejecución Remota de Código sin autenticación en el motor de computación distribuida de IA Ray, explotada mediante ataques de rebinding de DNS basados en navegador. Fue...

CVE-2024-38856-ApacheOfBiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz is an open source enterprise resource planning system. It provides a suite of enterprise applications that integrate and automate many of the business processes of an enterprise. CVE-2024-38856 is a pre-authentication flaw in Apache OFBiz that can lead to...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...

CVE-2021-1675-PrintNightmare-Analysis

Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...