EUVD-2026-118731

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a path traversal vulnerability...

CVE-2026-17335 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. File paths in uploaded content are not sufficiently validated, which could allow files to be written outside the intended location and code to be executed...

CVE-2026-17335

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to arbitrary code execution via a path traversal flaw. The root cause is the insufficient validation of file paths within uploaded content, which can allow an attacker to write files outside the intended directory. A remote authent...

EUVD-2026-118726

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. File paths in uploaded content are not sufficiently validated, which could allow files to be written outside the intended location and code to be executed...

CVE-2021-42756

CVE-2021-42756 Multiple stack-based buffer overflow vulnerabilities CWE-121 in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via...

cve-2020-11651

CVE-2020-11651 This is a POC for CVE-2020-11651, which obtains pre-auth RCE on a salt stack master, and/or all the associated minions. Some light details on the issue are here. POC for 2020-11652 not included. This obtains command execution on the master by creating a runner of salt.cmd with...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

CVE-2018-11235-DEMO

CVE-2018-11235 Usage chybeta@ubuntu git clone https://github.com/CHYbeta/CVE-2018-11235-DEMO.git chybeta@ubuntu cd CVE-2018-11235-DEMO chybeta@ubuntu /CVE-2018-11235-DEMO /usr/local/bin/git --version git version 2.17.0 chybeta@ubuntu /CVE-2018-11235-DEMO ./build.sh Analysis RCE with Git submodule...

CVE-2025-53690-Analysis

CVE-2025-53690: Sitecore ViewState Deserialization Vulnerability Analysis Overview CVE-2025-53690 is a critical ViewState deserialization vulnerability discovered in the Sitecore product suite, allowing remote code execution by exploiting exposed ASP.NET machine keys. Basic Information CVE ID :...

CVE-2026-17239

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities, including a path traversal flaw (CWE-22). This issue could allow a remote authenticated attacker to achieve arbitrary code execution . The vulnerability carries a CRITICAL CVSS 3.1 base score of 9.9 due t...

EUVD-2026-118667

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a path traversal vulnerability...

CVE-2026-17239 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a path traversal vulnerability...

EUVD-2026-118645

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. Uploaded custom module content is not sufficiently validated...

CVE-2026-17150 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. Uploaded custom module content is not sufficiently validated...

CVE-2026-17150

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to multiple issues resulting from insufficient input validation . Specifically, the software fails to sufficiently validate uploaded custom module content before processing. This flaw could allow a re...

CVE-2026-17147

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are impacted by multiple vulnerabilities. A path traversal vulnerability allows a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative actions . The severity is rated as CR...

EUVD-2026-118644

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative actions due to a path traversal vulnerability...

CVE-2026-17147 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative actions due to a path traversal vulnerability...

CVE-2026-17140 Multiple Vulnerabilities in IBM API Connect

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the product, which could lead to code execution...

EUVD-2026-118640

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. Input supplied by a user can influence code generated by the product, which could lead to code execution...