CVE-2026-116319

A flaw was found in PostgreSQL. An authenticated database user with permission to create objects can trigger a use-after-free memory flaw in the PL/Perl procedural language extension through reentrant returnnext calls. This vulnerability allows the user to execute arbitrary code on the host syste...

CVE-2020-7961-Mass

CVE-2020-7961-Mass CVE-2020–7961 Mass exploit for Script Kiddies Tested on: Kali Linux, Windows,... Requirements: apt install python3 pip3 install requests colorama Usage: python3 rce.py target url | For a single target python3 mass.py list url | For a list target Saved file to: linux.txt, win.tx...

CVE-2025-69600

CVE-2025-69600 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200966 Command injection in Raynet's rvia allows adversaries to execute commands via getconfig, upload, inventory, and orac...

CVE-2026-116317

A flaw was found in PostgreSQL. A heap-based buffer overflow in the text search ranking function, tsrankcd, allows an authenticated database user to execute arbitrary code with the privileges of the operating system user running the database service. By supplying a malformed text search vector...

CVE-2026-116315

A flaw was found in PostgreSQL. This vulnerability allows an authenticated database user to execute arbitrary code with the privileges of the operating system user running the database service. By supplying specifically structured text search vector tsvector data to the tsvectordelete function, a...

CVE-2026-116314

A flaw was found in PostgreSQL. An attacker can achieve arbitrary code execution as the operating system user running the pgrestore database restoration utility by providing a specially crafted archive file. Due to improper input validation, processing this malicious archive causes commands to...

CVE-2026-116309

A flaw was found in PostgreSQL. A type confusion vulnerability in the PL/Perl Procedural Language/Perl extension may allow an authenticated database user to achieve arbitrary code execution. By passing an unexpected data reference type into an internal array structure PostgreSQL::InServer::ARRAY,...

CVE-2026-116304

A flaw was found in PostgreSQL. An authenticated database user can exploit this vulnerability to execute arbitrary code with the privileges of the operating system user running the database. This issue stems from a use-after-free condition during the coordination of anonymous RECORD type...

CVE-2026-116307

A flaw was found in PostgreSQL. A use-after-free memory flaw in the PL/Perl plperl procedural language extension allows an authenticated database user with object creation privileges to execute arbitrary code as the operating system user running the database service. This issue occurs when...

CVE-2026-116306

A flaw was found in PostgreSQL. An authenticated user with database object creation privileges can trigger a type confusion issue during composite-value field assignments by altering composite types between operations. Successful exploitation allows an attacker to execute arbitrary code on the ho...

CVE-2026-18447

A flaw was found in PostgreSQL. An authenticated database user with privileges to create database objects can trigger a type confusion flaw by defining a SQL-language function with an output parameter of type "any". This vulnerability allows the user to execute arbitrary code with the permissions...

CVE-2026-6460

A flaw was found in PostgreSQL. Inadequate tracking of typed values allows an authenticated user with permissions to create or alter database objects to trigger a type confusion vulnerability by executing specific data definition commands, such as altering column data types. A threat actor can...

CVE-2026-6467

A flaw was found in PostgreSQL. An uncontrolled search path issue in extension management allows an authenticated user with database-level CREATE privileges to execute arbitrary code as the database superuser. By altering schemas or specifying crafted schema names during extension installation or...

CVE-2022-36779

CVE-2022-36779 exploit code for Unauthenticated OS Command Injection Proscend at Industrial Cellular Router. https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICEIndustrial4GLTECellularRouterICR111WG.pdf?v=1620814301 https://www.proscend.com/en/category/index.html...

CVE-2022-36067-vm2-POC-webapp

CVE-2022-36067-vm2-POC-webapp Steps to reproduce 1. maybe install vm2 globally first npm -install [email protected] -g 2. run: node index.js 3. visit http://localhost:5000/poc 4. Upload poc file such as poc2.js or code and observe RCE...

react2shellexploitvisualized

React2Shell CVE-2025-55182 Visualization An interactive educational visualization explaining the React2Shell vulnerability - a critical CVSS 10.0 remote code execution flaw in React Server Components. What This Is A 5-step narrated walkthrough that explains: 1. Traditional SSR - How server-side...

CVE-2018-8097-PoC

CVE-2018-8097 POC for CVE-2018-8097 This script exploits CVE-2018-8097 and can retrieve files and contents using a time based blind RCE method. Usage python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help message and exit -u, --url URL...

EXPLOIT-CVE-2026-22778

CVE-2026-22778 — vLLM RCE in video processing Vulnerable lab + proof of concept for CVE-2026-22778 CVSS 9.8, an unauthenticated remote code execution chain in vLLM's multimodal ingestion path. | ---|--- CVE| CVE-2026-22778 Advisory| GHSA-4r2x-xpjr-7cvv Affected| vLLM = 0.8.3, vLLM turned...

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Unrestricted File Upload Unauthenticated Arbitrary File Upload viawcdpsavecanvasdesignajax WooCommerce Designer Pro plugin – Remote Code Execution RCE 📖 Description The WooCommerce Designer Pro plugin for WordPress contains an unauthenticated arbitrary...

cve-2025-24893-poc

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Concept exploit for CVE-2025-24893 , a critical unauthenticated Remote Code Execution vulnerability in XWiki. This exploit abuses a Groovy template injection in the SolrSearch endpoint to execute arbitrary commands — including reverse shells...