Linux Distros Unpatched Vulnerability : CVE-2026-6460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE...

RockyLinux 10 : xorg-x11-server-Xwayland (RLSA-2026:98581)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:98581 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Linux Distros Unpatched Vulnerability : CVE-2026-120149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in PostgreSQL foreign batch inserts allows a foreign server to execute arbitrary code, via reporting that it inserted more rows than...

Linux Distros Unpatched Vulnerability : CVE-2026-116326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmpbuf, via a tied Perl object, or a Perl object whose overloaded...

JetBrains CLion < 2026.2.4.1 Multiple Vulnerabilities

The version of JetBrains CLion installed on the remote host is prior to 2026.2.4.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug profile. CVE-2026-123276 - In JetBrain...

Linux Distros Unpatched Vulnerability : CVE-2026-120143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating system user running the database, via a curso...

RockyLinux 10 : mod_http2 (RLSA-2026:98978)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:98978 advisory. httpd: Apache HTTP Server: modhttp2 use-after-free / wild write via shared session-bbtmp re-entrancy CVE-2026-57941 httpd:2.4/modhttp2: modhttp2: httpd...

CVE-2017-6516-mcsiwrapper-

CVE-2017-6516 CVE-2017-6516 is a privilege escalation vulnerability that targets the .mcsiwrapper binary from MagniCorp SysInfo under version 10-H64. When this binary has the SUID bit set and is outdated, a user may execute arbitrary code as the owner of the binary - which is often root...

CVE-2024-1212

CVE-2024-1212 - Progress Kemp LoadMaster Unauthenticated Command Injection This is an exploit script for CVE-2024-1212 , an unauthenticated command injection vulnerability in Progress Kemp LoadMaster. Vulnerability Summary CVE-2024-1212 affects Progress Kemp LoadMaster , allowing unauthenticated...

CVE-2025-30911

Exploit for CVE-2025-30911 – WordPress RomethemeKit = 1.5.4 This script exploits a critical vulnerability in the RomethemeKit For Elementor WordPress plugin = v1.5.4 that allows authenticated arbitrary plugin installation and activation , potentially leading to Remote Code Execution RCE. 🛠️...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

CVE-2022-20607

CVE-2022-20607 In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability

This repository does not have a README...

CVE-2025-64512-pdfminer-PoC

CVE-2025-64512 — pdfminer.six CMapDB Deserialization PoC Proof-of-Concept for a deserialization vulnerability in pdfminer.six that leads to arbitrary code execution when parsing a crafted PDF. PURPOSE / LEGAL DISCLAIMER This repository is provided for educational and authorized security research...

CVE-2026-78745

CVE-2026-78745 — Remote Code Execution via Android Debug Bridge ADB CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices using the Hi3751V350 and Hi3751V352EDMO platforms. The vulnerability allows a remote attacker to execute arbitrary code through the Android Debug Bridge adbd daemon...

CVE-2022-24715

CVE-2022-24715 Icinga Web 2 - Authenticated Remote Code Execution 2.8.6, 2.9.6, 2.10 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...

CVE-2025-55182-Exploit-PoC-Scanner

CVE-2025-55182 - React Server Components RCE Exploit v2.0 A comprehensive security research tool for testing CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React Server Components RSC and Next.js Server Actions. Vulnerability Overview Property| Value ---|--- CVE IDs| CVE-2025-55182,...

puma: Puma: HTTP Request Smuggling via Underscore Header Name Confusion

A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system...

puma: Puma: HTTP Request Smuggling via Underscore Header Name Confusion

A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system...

react2shell-exploit

🐺 React2Shell-Exploit-Kensei CVE-2025-55182 - Next.js RCE Remote Code Execution Exploit framework + vulnerable lab + Burp Suite & Nuclei validation. Complete exploitation framework and vulnerable lab environment for security research and penetration testing...