566551 matches found
CVE-2021-41773-RCE
CVE-2021-41773-RCE...
OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files
A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...
CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates
CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates A critical RCE vulnerability in Windows TCP/IP stack CVE-2025-26686 leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now By Mark Mallia Type: Remote Code...
go-get-rce
This repository does not have a README...
CVE-2023-38831_Exploit
CVE-2023-38831 Exploit Proof-of-Concept Overview This repository contains a Python script that demonstrates a proof-of-concept PoC exploit for CVE-2023-38831. This exploit leverages a vulnerability in specific file-processing mechanisms to execute a reverse shell payload through a malicious RAR...
cve-2021-41773
Apache httpd RCE A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside these directories are not protected by default...
LayarKacaSiber-CVE-2021-41773
CVE-2021-41773 - Apache HTTP Server 2.4.49 How to Run the CVE-2021-41773-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this GitHub repo 3. Go to the Path Traversal folder 4. Run the following commands docker build -t cve-2021-41773-path-traversal . and docker run --rm -d...
CVE-2022-1329
CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...
CVE-2026-25212
CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...
CVE-2026-91018: Double Free
lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...
EUVD-2026-84857
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection into a no-op on every state-changing admin request, and it does not send the csrftoken hidden field in admin forms. Because administrator authentication is cookie-only and no CSRF token is enforced, an...
CVE-2026-75655: Uncontrolled Recursion
Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...
CVE-2026-24239: Deserialization of Untrusted Data
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...
CVE-2026-89281: Incorrect Permission Assignment for Critical Resource
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...
VulnCheck KEV: CVE-2016-20080
WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the wpabspath parameter. Attackers can supply path traversal sequences or remote URLs through the...
RHEL 8 : postgresql:16 (RHSA-2026:69876)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69876 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...
CVE-2026-75676: Stack-based Buffer Overflow
Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-75663: Out-of-bounds Write
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-67615: Deserialization of Untrusted Data
openEQUELLA before 2026.1.0 contains an authenticated remote code execution vulnerability that allows any authenticated non-guest user to execute arbitrary code by exploiting Java deserialization in the HTTP invoker endpoint at /invoker/. Attackers can bypass the class-name denylist enforced by...
