EulerOS Virtualization 2.15.1 : edk2 (EulerOS-SA-2026-4584)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...

PT-2026-138993

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A remote authenticated attacker can execute arbitrary code because the system does not properly control the modification of obje...

PT-2026-139005

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A path traversal issue allows a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative...

PT-2026-139092

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description A path traversal flaw allows a remote attacker to execute arbitrary code without requiring authentication. Path traversal is a technique used to access files and directories that a...

Linux Distros Unpatched Vulnerability : CVE-2026-123095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdlhook script that allows remote attackers to add unchecked entries by...

Linux Distros Unpatched Vulnerability : CVE-2026-114134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with usepyproject: true accepts tool.black.required-version from...

Linux Distros Unpatched Vulnerability : CVE-2026-73860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CRIU is a checkpoint and restore tool for Linux. Prior to 4.2.1, CRIU injects a syscall;int3 sequence at the start of the first executable virtual memory area a...

PT-2026-139481

Name of the Vulnerable Software and Affected Versions Tenda AC19 version 16.03.10.07 Description A heap-based buffer overflow occurs in the saveParentControlInfo function within the /goform/saveParentControlInfo endpoint. This issue is triggered by the manipulation of the deviceId argument,...

PT-2026-139094

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Remote authenticated attackers can execute arbitrary code due to improper control of code generation. This allows authenticated...

PT-2026-139143

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Remote authenticated attackers can execute arbitrary code on the server due to insufficient validation of uploaded content. The...

PT-2026-139480

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the client management component occurs when a client is created or imported with authorization services enabled. The system fails to clear an internal session attribute used during...

PT-2026-139152

Name of the Vulnerable Software and Affected Versions IBM API Connect versions 10.0.8.0 through 10.0.8.12 IBM API Connect versions 12.1.0.0 through 12.1.1.2 Description Improper neutralization of special elements in an OS command allows a remote attacker to execute arbitrary code without requirin...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

CVE-2024-36401-GeoServer-RCE

RCE vulnerability in GeoServer CVE-2024-36401 - detection script CVE-2024-36401 is a critical security vulnerability affecting GeoServer, an open-source server for sharing geospatial data, and GeoTools, an open-source Java library that provides tools for geospatial data. The vulnerability,...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 Check Overview This template is designed to check the presence of the SAP NetWeaver CVE-2025-31324 vulnerability. This vulnerability allows unauthorized users to upload JSP files through the /developmentserver/metadatauploader endpoint, which can lead to potential remote code...

CVE-2024-21762-Checker

CVE-2024-21762-Checker This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses. For more information, see this Bishop...

CVE-2024-46209

Redaxo Security Research CVE-2024-46209, CVE-2024-46210 Redaxo CMS v5.17.1 security research Completed at 09 August 2024 Contains detailed description of: CVE-2024-46210 - Stored Cross-Site Scripting via file Upload in MediaPool module CVE-2024-46209 - Authenticated arbitrary code execution...

CVE-2025-69985

CVE-2025-69985: Exploit for Authentication Bypass to RCE in FUXA ≤1.2.8 📌 General Description This repository contains a Proof of Concept PoC and detailed technical documentation about the vulnerability CVE-2025-69985 , which affects FUXA versions ≤1.2.8. The vulnerability allows an unauthenticat...