1324582 matches found
CVE-2026-34197
CVE-2026-34197 — Apache ActiveMQ RCE via Jolokia API Description CVE-2026-34197 is a remote code execution RCE vulnerability in Apache ActiveMQ Classic that allows an attacker to execute arbitrary commands on the server's operating system through the Jolokia API exposed on the web console. The...
CVE-2026-118375 llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...
EUVD-2026-111551
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...
CVE-2026-118375
The llama.cpp project (versions b8841 before b11865 ) is vulnerable to a stack-based buffer overflow in the ggml-rpc RDMA transport rdma_recv() function. This out-of-bounds write allows unauthenticated peers to overflow the rpc-server stack by sending up to 256 KiB into a 1-byte stack variable wi...
CVE-2026-118375 llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdmarecv function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack...
CVE-2026-117607
Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via importlanguage.php containing a .inc file, then request it through the languag...
EUVD-2026-111542
Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via importlanguage.php containing a .inc file, then request it through the languag...
CVE-2026-117607 Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import
Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via importlanguage.php containing a .inc file, then request it through the languag...
cve-2024-7965-poc
cve-2024-7965-poc CVE-2024-7965 is a high-severity vulnerability in the V8 JavaScript engine of the Google Chrome browser. The vulnerability stems from improper implementation in the V8 engine when handling specific JavaScript code, leading to heap memory corruption. An attacker could exploit thi...
CVE-2013-0156
Rails YAML deserialization RCE CVE-2013-0156 - PentesterLab Compatible Ronin-free, Ruby 3.x compatible version of https://gist.github.com/postmodern/4499206 Usage: ruby railsrce.rb http://target/ "system'/usr/local/bin/score UUID'" ⚠️ LEGAL DISCLAIMER ⚠️ This script is for EDUCATIONAL PURPOSES ONLY...
Ashwesker-CVE-2026-20045
🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...
CVE-2026-22686-RemoteCodeExecution-RCE-PoC
RCE in ESM Environments — The require Problem When achieving sandbox escape via CVE-2026-22686, executing OS commands in an ESM project "type": "module" requires bypassing Node.js module loading restrictions. Standard approaches fail for the following reasons: Vector| Result ---|---...
CVE-2026-31431-live-code-corruption
CVE-2026-31431 — Live Code Corruption via Page Cache A novel exploitation technique for CVE-2026-31431 "Copy Fail" that corrupts executable code of running processes through the Linux kernel's page cache, achieving root privilege escalation. What's Different All published exploits for this CVE...
CVE-2022-36804-ReverseShell
Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...
Webmin1.910_exploit
Webmin 1.910 Remote Code Execution Exploit Description: This repository contains a Python 3 script designed to exploit a remote code execution vulnerability in Webmin version 1.910. The script utilizes the sessionlogin.cgi endpoint to perform authentication and deploy a reverse shell payload,...
ESPOCRM-RCE-POC-CVE-2026-33656
EspoCRM command Example: ./poc.sh http://192.168.5.16:8090 admin admin id...
cve-2026-21877-rce
This repository does not have a README...
tinyfilemanager-2.4.3-exploit
CVE-2021-45010 Tiny File Manager-2.4.3 exploit A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project's Tiny File Manager = 2.4.6 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve...