Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: Обход аутентификации и удалённое выполнение кода в n8n 1. Обзор уязвимости Название: Ni8mare ID CVE: CVE-2026-21858 Оценка CVSS: 10.0 Критическая Тип уязвимости: Обход аутентификации, локальное включение файлов LFI, удалённое выполнение кода RCE Затронутые версии: n8n верс...

CVE-2026-41900-POC

OpenLearnX-RCE Неаутентифицированное RCE в OpenLearnX через монтирование тома контейнера Обнаружение на основе диффа → Тихий патч → Побег из песочницы → Полное раскрытие /tmp...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - pullrequesttarget 주입을 통한 RCE → 공급망 손상 발견 및 보고: Astaruf 전체 분석 문서: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ 업스트림 권고: sherlock-project/sherlock GHSA advisory NVD 항목: https://nvd.nist.gov/vuln/detail/CVE-2026-44590 CV...

CVE-2026-5027

CVE-2026-5027 - Langflow 경로 탐색을 통한 원격 코드 실행 설명 Langflow 1.8.4 이하 버전은 POST /api/v2/files 엔드포인트의 filename 매개변수를 검증하지 않습니다. 공격자는 경로 탐색 시퀀스../를 사용하여 파일 시스템의 임의 위치에 파일을 쓸 수 있습니다. Langflow의 기본 자동 로그인 구성과 결합하면 인증 없이도 악용이 가능하며, cron 작업 주입을 통해 root 권한으로 원격 코드 실행으로 이어질 수 있습니다. 영향을 받는 버전 취약한 버전: Langflow =...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 Неаутентифицированная произвольная загрузка файлов. Описание : Плагин Ninja Forms - File Uploads для WordPress уязвим к неаутентифицированной произвольной загрузке файлов из-за отсутствия проверки типа файлов и отсутствия проверки прав доступа в...

cve-2021-41773

cve-2021-41773 서버 실행 $ docker build -t cve-2021-41773 . $ docker run --rm -d -p 80:80 cve-2021-41773 익스플로잇 curl --data "echo;id" 'http://localhost/cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd' 원인 httpd.conf 파일의 설정 오류와 Path traversal이 결합되어 RCE 발생...

Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution

Spring Data REST 2.6.9 and 3.0.1, Spring Boot 1.5.9 and 2.0 M6 contain a remote code execution caused by processing malicious PATCH requests with crafted JSON data, letting attackers execute arbitrary Java code, exploit requires sending malicious PATCH requests. id: CVE-2017-8046 info: name: Spri...

Primetek Primefaces 5.x - Remote Code Execution

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution. id: CVE-2017-1000486 info: name: Primetek Primefaces 5.x - Remote Code Execution author: Moritz Nentwig severity: critical description: Primetek Primefaces 5.x is vulnerable to a weak encryption fl...

Ruby Dragonfly <1.4.0 - Remote Code Execution

Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishand...

Cobbler <3.3.0 - Remote Code Execution

Cobbler before 3.3.0 allows log poisoning and resultant remote code execution via an XMLRPC method. id: CVE-2021-40323 info: name: Cobbler 3.3.0 - Remote Code Execution author: c-sh0 severity: critical description: Cobbler before 3.3.0 allows log poisoning and resultant remote code execution via ...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

NetAlertX 23.01.14–24.x < 24.10.12 - Remote Code Execution

NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php. id: CVE-2024-46506 info: name:...

Aimhubio Aim Server 3.19.3 - Arbitrary File Overwrite

A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated to create an...

WordPress DZS Zoomsounds <=6.50 - Local File Inclusion

WordPress Zoomsounds plugin 6.45 and earlier allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsapdownload action using directory traversal in the link parameter. id: CVE-2021-39316 info: name: WordPress DZS Zoomsounds =6.51 to fix t...

IBM Operational Decision Manager - JNDI Injection

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145. id: CVE-2024-22319 info: name: IBM Operational Decision Manager -...

Sitecore Experience Platform - Deserialization of Untrusted Data

Sitecore Experience Platform before 8.2 Update-7 and 9.0 before Update-2 is vulnerable to a remote code execution vulnerability CVE-2019-9874. An attacker can exploit this issue to execute arbitrary code on the affected system via a crafted request to the...

QNAP Photo Station < 6.0.3 - Remote Code Execution

QNAP Photo Station versions prior to 6.0.3 contain multiple vulnerabilities that, when chained together, enable unauthenticated remote code execution RCE. id: CVE-2019-7194 info: name: QNAP Photo Station 6.0.3 - Remote Code Execution author: x-stp severity: critical description: | QNAP Photo...

Pterodactyl Panel - Remote Code Execution

Pterodactyl is a free, open-source game server management panel. Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. id: CVE-2025-49132 info: name: Pterodactyl Panel - Remote Code Execution...

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

Apache Struts <2.3.1.1 - Remote Code Execution

Apache Struts before 2.3.1.1 is susceptible to remote code execution. When developer mode is used in the DebuggingInterceptor component, a remote attacker can execute arbitrary OGNL commands via unspecified vectors, which can allow for execution of malware, obtaining sensitive information,...