CVE-2026-123278

In JetBrains IntelliJ IDEA versions prior to 2026.3 , a vulnerability exists that allows for code execution . The root cause is an unauthenticated JDBC worker RMI endpoint , which lacks necessary authentication for critical functionality (CWE-306). This vulnerability allows for High confidentiali...

EUVD-2026-118043

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...

CVE-2026-123279

In JetBrains Datalore versions prior to 2026.4 , a vulnerability allows for code execution within a notebook's computation. This issue stems from Incorrect Authorization (CWE-863), specifically enabling view-only collaborators to execute code. The vulnerability carries a CRITICAL CVSS 3.1 base sc...

CVE-2026-123278

In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint...

EUVD-2026-118044

In JetBrains Datalore before 2026.4 code execution was possible in a notebook's computation by view-only collaborators...

CVE-2026-123276

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

CVE-2026-123276

JetBrains CLion versions before 2026.3 (specifically 2026.2.4.1 ) are vulnerable to code execution when running in Safe Mode . The root cause is the inclusion of functionality from an untrusted control sphere (CWE-829) triggered via a crafted GDB server debug profile . This vulnerability has a Hi...

EUVD-2026-118041

In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile...

CVE-2024-10571

CVE-2024-10571 Chartify – WordPress Chart Plugin = 2.9.5 - Unauthenticated Local File Inclusion via source Description The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This make...

CVE-2026-87964

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 8.0.26. This is due to insufficient sanitization of the feedConfigCustom2 parameter — only wpunslash is...

FlaskCache_CVE-2021-33026_POC

Pickle Serialization Remote Code Execution - Redis Poisoning PoC Exploit Check redis server up and running redis-cli -h 127.0.0.1 -p 6379 ping redis-cli keys redis-cli get Keyid Start listening netcat at port 10001 : nc -nvlp 10001 Setting environments for Flask Chache python -m venv venvflaskcac...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Class Input Validation Error Credits Tobias Kraze from makandra an...

EUVD-2026-118171

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 8.0.26. This is due to insufficient sanitization of the feedConfigCustom2 parameter — only wpunslash is...

CVE-2026-87964 Product Feed Manager for WooCommerce <= 8.0.26 - Authenticated (Shop Manager+) PHP Code Injection via eval() via 'feedConfigCustom2' Parameter

The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 8.0.26. This is due to insufficient sanitization of the feedConfigCustom2 parameter — only wpunslash is...

CVE-2026-87964

The Product Feed Manager for WooCommerce – CTX Feed WordPress plugin (versions

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Reference: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - python code to run...

CVE-2020-17531

CVE-2020-17530 Apache Struts2 framework is a web framework for developing Java EE web applications. Apache Struts disclosed S2-061 Struts remote code execution vulnerability CVE-2020-17530 on December 08, 2020. When using certain tags and other cases, there may be an OGNL expression injection...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

CVE-2018-7600

CVE-2018-7600 Only working on version 8, not 7. Install git clone https://github.com/0xAJ2K/CVE-2018-7600.git pip3 install -r requirements.txt python3 CVE-2018-7600.py Usage python3 CVE-2018-7600.py -u http://172.31.1.27 Expected output kali :: /opt/myscripts » ./CVE-2018-7600.py -u...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 is a critical path traversal vulnerability in WinRAR that allows arbitrary code execution. Currently exploited by APT groups such as GOFFEE, Bitter APT-C-08 and Gamaredon. 📋 Index...