CVE-2026-47686

A flaw was found in vm2. The sandbox fails to properly sanitize the error cause property when handling exceptions thrown by host functions. An attacker capable of running untrusted code within the sandbox can exploit this issue to access privileged host objects and bypass isolation boundaries...

cve-2019-5420-POC

Rails ActiveSupport Exploit cve-2019-5420 POC consider this to chain CVE-2019-5418! Pairs lovely with CVE-2019-5418! POC Screenshot 🚨 Warning This repository contains a proof-of-concept PoC exploit demonstrating remote code execution RCE in Ruby on Rails applications via...

CVE-2026-93995 Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server

Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component org.apache.sshd:sshd-git provides though class GitPgmCommandFactory a way to configure an Apache MINA SSHD...

CVE-2026-102454

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-102455

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: Update to 5.3.1. CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loader...

SUSE-SU-2026:4402-1 Security update for python-PyYAML

This update for python-PyYAML fixes the following issues: - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the fullload method or with the FullLoader loade...

R2S_CVE-2025-55182

Escáner CVE-2025-55182 Escáner de vulnerabilidades para CVE-2025-55182 - Ejecución remota de código en Server Actions de Next.js. Acerca de CVE-2025-55182 Gravedad: Crítica CVSS por determinar Versiones afectadas: Next.js: 15.x 15.5.7, 16.0.x 16.0.7 React: 19.0.0, 19.1.0, 19.1.1, 19.2.0 Impacto:...

CVE-2025-69516

CVE-2025-69516 - Ejecución Remota de Código en Tactical RMM Este repositorio contiene un script de Python que automatiza la explotación de la vulnerabilidad SSTI CVE-2025-69516 en Tactical RMM. Ha sido probado en la versión 1.3.1. Uso python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id"...

Vulnerabilities in NetScaler ADC and NetScaler Gateway

Citrix has identified 8 vulnerabilities in NetScaler ADC and NetScaler Gateway. The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable: - Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 before version 14.1-73.37 - Citrix NetScaler ADC and Citri...

CVE-2026-102455 DigiWin｜EasyFlow .NET - Insecure Deserialization

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

CVE-2026-102455

The EasyFlow .NET software developed by Digiwin contains an Insecure Deserialization vulnerability. This flaw allows unauthenticated remote attackers to achieve arbitrary code execution on the server by submitting maliciously crafted serialized content. The provided documents do not specify a par...

EUVD-2026-89711

EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content...

Exploit-CVE-2025-68613

Exploit-CVE-2025-68613 Security Advisory: Critical Remote Code Execution Vulnerability in n8n CVE-2025-68613 A critical vulnerability has been identified in the n8n workflow automation tool that allows for arbitrary code execution. Authenticated users with permissions to create or edit workflows...

CVE-2025-57310

CVE-2025-57310 A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Base Score: 8.8 High...

CVE-2023-38890

CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution WriteUp CVE-2023-38890 – ExploitDB 50029...

CVE-2026-102454 DigiWin｜EasyFlow .NET - Arbitrary File Upload

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-102454 DigiWin｜EasyFlow .NET - Arbitrary File Upload

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-102454

The EasyFlow .NET software developed by Digiwin is susceptible to an Arbitrary File Upload vulnerability. A privileged remote attacker can exploit this flaw to upload and execute web shell backdoors , which leads to arbitrary code execution on the server. No specific affected versions, root cause...

EUVD-2026-89681

EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...