526058 matches found
CVE-2023-27532-RCE-Only
Forked Version RCE Only Forked repository and removed the credential leak part. Applied fixes for compilation. CVE-2023-27532 Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution. Overview For a detailed analysis of the...
CVE-2026-21858
🚨 CVE-2026-21858 — “Ni8mare” A critical unauthenticated remote code execution vulnerability in an open-source workflow automation platform. 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Impact Exploitation Detection Remediation Mitigation Summary 🔎 Overview...
EXPLOIT-CVE-2025-55182
CVE-2025-55182 Proof of Concept Overview A practical demonstration of CVE-2025-55182 React2Shell - a critical RCE vulnerability in React Server Components. Vulnerability Details CVE ID : CVE-2025-55182 Type : Remote Code Execution via Prototype Pollution CVSS : 9.8 CRITICAL Affected : React...
CVE-2026-53534
JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getCommand passes it through...
CVE-2026-53554
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py uses attacker-controlled multipart filename data when selecting where uploaded content is stored, writes...
CVE-2025-55182_liyon
CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...
CVE-2022-41678
Apache ActiveMQ CVE-2022-41678 Exploit Tool Vulnerability Overview Reference document: https://app.nextcyber.cn/courses/41/tasks/580 CVE-2022-41678 is a remote code execution vulnerability in Apache ActiveMQ. This vulnerability allows an attacker to modify Log4j configuration or JFR Java Flight...
CVE-2025-24813-POC
CVE-2025-24813 概念验证（独立版） 本仓库包含针对 CVE-2025-24813 的非破坏性独立 PoC，该漏洞存在于 Apache Tomcat 9.0.55 中，允许通过部分 PUT 请求进行远程文件上传。此漏洞利用通过上传并访问一个无害的 JSP 文件来演示代码执行。 📁 目录 proof.jsp：用于演示代码执行的无害 JSP 载荷。 cve202524813clientdemo.py：用于检测、利用、验证、记录和清理的 Python3 脚本。 report.txt：自动生成的测试会话日志。 🧰 环境要求 Python 3.7+ 可选：html2image...
CVE-2026-50158 yutu: Arbitrary File Write via MCP `caption-download` Tool
yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download in pkg/caption/caption.go, where os.Create creates or truncates that...
CVE-2026-50158 yutu: Arbitrary File Write via MCP `caption-download` Tool
yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download in pkg/caption/caption.go, where os.Create creates or truncates that...
CVE-2026-50158
yutu (github.com/eat-pray-ai/yutu), an AI-powered YouTube channel management toolkit, is vulnerable to arbitrary file write via its MCP caption-download tool prior to v0.10.9 . The root cause is that the tool passes a caller-controlled file path directly to os.Create() in pkg/caption/caption.go w...
log4j2-test
Log4j2 2.14.1 LDAP Remote Code Execution Vulnerability CVE-2021-44228 Verification 🎈 Tested on Spring Boot 2.x environment Vulnerability advisory https://nvd.nist.gov/vuln/detail/CVE-2021-44228 target-server pom.xml : Downgraded Log4j2 version to a vulnerable version root@kitploit: 17 2.14.1...
CVE-2026-53554 SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py uses attacker-controlled multipart filename data when selecting where uploaded content is stored, writes...
CVE-2026-53554 SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing
SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. Prior to 1.9.0, the POST /api/v1/datasource/parseExcel endpoint in backend/apps/datasource/api/datasource.py uses attacker-controlled multipart filename data when selecting where uploaded content is stored, writes...
CVE-2026-53554
SQLBot (an intelligent Text-to-SQL system based on LLMs and RAG) is vulnerable to arbitrary file write leading to remote code execution prior to version 1.9.0 . The POST /api/v1/datasource/parseExcel endpoint uses attacker-controlled multipart filename data to determine the storage path, writes c...
DEBIAN-CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-93381
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
CVE-2026-93381
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
CVE-2026-93377
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...