openSUSE 16 Security Update : ansible-core (openSUSE-SU-2026:22172-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22172-1 advisory. - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running...

PUB-A-530002430

In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

F5 BIG-IP TMUI Remote Code Execution

F5 BIG-IP TMUI contains an unauthenticated remote code execution and local file inclusion vulnerability. This proof of concept can check a target, read target files, execute TMUI commands, and enumerate common target files. https://packetstorm.news/download/238764...

WordPress Gravity Forms 3.1.2 PHP Object Injection

WordPress Gravity Forms version 3.1.2 and prior contain an unauthenticated PHP object injection vulnerability in Post Custom Field List inputs with content templates enabled. The included proof of concept identifies forms and fields and submits a supplied serialized payload...

Apache Struts 2 Core 7.4.0 OGNL Code Execution

Apache Struts 2 Core version 7.4.0 and below contain an OGNL security-bypass issue that can allow nested reflective calls to execute arbitrary code where attacker-controlled input is evaluated as OGNL. Description Apache Struts2 Core version 7.4.0 and below attempt to prevent arbitrary code...

PUB-A-503505702

In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-115946: XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder

XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. Affected versions compile a bundled brotli into static archives that dependent XS modules link against at build time, rather than using the system library. The bundled copy, 1.0.7 or...

PUB-A-539619693

In IMGvkCreateImageView of imageview.c, there is a possible way to trigger a use after free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

Debian dla-4875 : imagemagick - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4875 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4875-1 [email protected]...

CentOS Linux 6 [TuxCare] Security Update: cpio Multiple Vulnerabilities (CENTOS6:CLSA-2026:1793167254)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1793167254 advisory. - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create T...

ASB-A-486464711

In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

RockyLinux 9 : bind9.18 (RLSA-2026:93072)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:93072 advisory. bind: BIND: Denial of Service via unbounded processing of crafted DNS messages CVE-2026-19630 bind: bind: Arbitrary code execution via GSS-TSIG UDP...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...

CVE-2022-36804-ReverseShell

Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...

Nostromo_Python3

Nostrom RCE Python3 Exploit Code: Usage: $ python3 ./exp.py vulnerable.host 8080 id uid=65534 gid=65534...

cdt-vulnsamba-deploy

CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...

CVE-2018-11776-FIS

CVE-2018-11776 is a security vulnerability in Apache Struts, a popular framework for developing web applications. This vulnerability allows attackers to carry out remote attacks by injecting malicious code into data fields of HTTP requests. This vulnerability has been widely exploited in...

CVE-2022-46169

Cacti | Auth Bypass | RCE | CVE-2022-46169 Cacti: Unauthenticated Remote Code Execution Exploit in Ruby Cacti Docker This is a dockerized application that is vulnerable to the Cacti RCE vulnerability CVE-2022-46169. Follow the link to get Cacti running...

CVE-2025-3248

CVE-2025-3248 — Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features 🔓 Remote & unauthenticated RCE 🔐 No authentication required 🐍 Python3 one-liner script 🎨 Colorized terminal...

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...