588328 matches found
CVE-2026-100840 MONAI through 1.6.0 Remote Code Execution via bundle configuration
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...
CVE-2026-100840 MONAI through 1.6.0 Remote Code Execution via bundle configuration
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...
EUVD-2026-87848
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...
EUVD-2026-87849
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-100721 vm2 before 3.12.2 Authorization Bypass via Custom Resolver
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures require.external with a custom resolver and context: 'host', LegacyResolver.customResolve in lib/resolver-compat.js records the resolved module directory in this.externals as new...
CVE-2026-100721 vm2 before 3.12.2 Authorization Bypass via Custom Resolver
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures require.external with a custom resolver and context: 'host', LegacyResolver.customResolve in lib/resolver-compat.js records the resolved module directory in this.externals as new...
CVE-2026-100721 vm2 before 3.12.2 Authorization Bypass via Custom Resolver
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures require.external with a custom resolver and context: 'host', LegacyResolver.customResolve in lib/resolver-compat.js records the resolved module directory in this.externals as new...
EUVD-2026-87858
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures require.external with a custom resolver and context: 'host', LegacyResolver.customResolve in lib/resolver-compat.js records the resolved module directory in this.externals as new...
CVE-2026-100721
The vm2 library (versions before 3.12.2 ) contains an authorization bypass in the NodeVM external-module resolver. When an embedder uses a custom resolver with context: 'host', the LegacyResolver.customResolve function in lib/resolver-compat.js fails to include a path separator or end-of-string b...
Strutter
Strutter CVE-2018-11776 的概念验证，附带搜索 Shodan API 以查找目标的功能。 CVE-2018-11776 Apache Struts 版本 2.3 至 2.3.34 和 2.5 至 2.5.16 存在可能的远程代码执行漏洞， 当使用没有命名空间的 results 且同时其上层 actions 没有命名空间或使用通配符 命名空间时。当使用未设置 value 和 action 的 url 标签且同时其上层 actions 没有命名空间或使用通配符 命名空间时，也存在同样的可能性。...
CVE-2022-3552
CVE-2022-3552 BoxBilling=4.22.1.5 - リモートコード実行 RCE 使用方法 python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...
couchdb-exploit
🚀 CouchDB Exploit - CVE-2017-12635 & CVE-2017-12636 Apache CouchDB - Privilege Escalation & Remote Code Execution 📖 Overview This tool exploits two critical vulnerabilities in Apache CouchDB: CVE| Description| Severity ---|---|--- CVE-2017-12635| Privilege Escalation via JSON Parsing Bypass| 🔴...
CVE-2021-21975
CVE-2021-21975 VMware vRealize Operations Manager API 服务器端请求伪造（SSRF） vRealize Operations vROps 是一款由 AI 驱动的自助式 IT 运维管理工具，覆盖从应用到基础设施的范围，用于优化、规划并扩展 VMware Cloud 和 HCI 部署，同时统一公共云监控。VMware vRealize Operations Manager API 8.4 及所有早期版本 存在服务器端请求伪造（SSRF）漏洞。成功利用此漏洞可能导致读取或更新内部资源，并且在此情况下，攻击者可以轻松窃取 vROps...
HavocPwn
Havoc-PWN Autenticado Esta cadena SSRF-RCE fue inspirada por el POC SSRF de CVE-2024-41570 de chebuya y el Havoc Auth RCE de IncludeSecurity; ambos exploits son increíbles y están muy bien elaborados, ¡por favor den a estos creadores el reconocimiento por su arduo trabajo! chebuya hyperreality...
CVE-2024-50427
CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - 已验证（订阅者+）任意文件上传 描述： WordPress 插件 SurveyJS: Drag & Drop WordPress Form Builder（用于创建、样式化并嵌入多种复杂表单）在所有版本（1.9.136 及更早版本）中因缺少文件类型验证，导致存在任意文件上传漏洞。这使得经过身份验证的攻击者（具有订阅者级别及以上访问权限）能够在受影响站点的服务器上上传任意文件，从而可能实现远程代码执行。 Published: 2024-10-24...
RCE-CVE-2024-7954
RCE-CVE-2024-7954 説明 SPIPのバージョン4.30-alpha2 、4.2.13 、4.1.16 より前のバージョンで使用されているporteplume プラグインは、重大な任意のコード実行（RCE）脆弱性の影響を受けます。この欠陥により、リモートの認証されていない攻撃者が特定のHTTPリクエストを作成することで、SPIPユーザーとして任意のPHPコードを実行できるようになります。悪用される可能性は深刻で、攻撃者がサーバー上で悪意のあるコマンドを実行できるため、不正アクセス、データ漏洩、またはさらなるシステム侵害につながる可能性があります。 脆弱性の詳細...
CVE-2026-63030-CVE-2026-60137
CVE-2026-63030 & CVE-2026-60137 — wp2shell WordPress Core 预认证 RCE — 路由混淆 + SQL 注入链式利用实现远程代码执行 | ---|--- CVE| CVE-2026-63030 + CVE-2026-60137 Alias| wp2shell 漏洞类型| REST API 路由混淆 → SQL 注入 → RCE 严重程度| 严重 — CVSS 10.0 受影响版本| WordPress 6.9.0–6.9.4, 7.0.0–7.0.1 修复版本| WordPress 6.8.6, 6.9.5, 7.0.2 认证要求|...
cve-2021-4034
cve-2021-4034 mkdir -p 'GCONVPATH=.'; touch 'GCONVPATH=./pwnkit'; chmod a+x 'GCONVPATH=./pwnkit' mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' pwnkit/gconv-modules echo...
n8n-cve-2026-21858
n8n-cve-2026-21858 CVE-2026-21858 + CVE-2025-68613 — Exploit de lectura de archivos no autenticada a RCE en n8n...
exploit-CVE-2025-55182-poc
CVE-2025-55182 - React Server Components 原型链漏洞 本 PoC 使用实际的 [email protected] 漏洞代码演示 CVE-2025-55182。 CVE-2025-55182 紧急修复指南：Next.js/React RSC 漏洞 CVSS 10.0 完整分析与缓解措施 本仓库 fork 自 https://github.com/ejpir/CVE-2025-55182-poc，尚未经过验证！请谨慎使用并仔细核实！ 快速开始 安装依赖 npm install 启动易受攻击的服务器（端口 3002） npm start 运行...