CVE-2026-92744 Delinea Privilege Manager agent unauthenticated remote code execution vulnerability

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem...

CVE-2026-92744

The Delinea Privilege Manager agent is vulnerable to a remote code execution (RCE) flaw. Under certain conditions, an unauthenticated remote attacker can exploit this vulnerability to execute arbitrary code with LocalSystem privileges. The vulnerability is associated with CWE-306 (Missing Authent...

CVE-2023-22793

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2023-22793

The Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center is vulnerable to a Critical remote code execution (RCE) flaw (CVE-2023-22793 ). This vulnerability allows an unauthenticated attacker to execute arbitrary code on affected servers. The flaw was discov...

CVE-2026-107238

A vulnerability in the Veeam Management Pack for Microsoft System Center Collector service allows an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account . This flaw was identified during internal testing and impacts Veeam Management Pack for Microsoft Syste...

CVE-2026-107239

The Veeam Management Pack for Microsoft System Center Collector service is vulnerable to Remote Code Execution (RCE) (CVE-2026-107239). This flaw allows a member of the Veeam Virtualization Extensions Users group to execute arbitrary code on affected servers. The vulnerability was discovered duri...

CVE-2026-107238

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2024-52375

WordPress Datasets Manager 💥 Exploit by: Nxploit Khaled Alenazi 📅 CVE Published: November 14, 2024 🧠 CVSS Score: 10.0 Critical 🛠 CWE-434: Unrestricted Upload of File with Dangerous Type 📌 Description A critical vulnerability was discovered in the Datasets Manager by Arttia Creative WordPress...

CVE-2021-42013

CVE-2021-42013 - Apache HTTP Server 2.4.50 How to Run CVE-2021-42013-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this github repo 3. Go to the Path Traversal folder 4. Enter the following commands docker build -t cve-2021-42013-path-traversal . and docker run --rm -dit...

brotli: Out-of-Bounds Write in Google Brotli Decoder

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...

CVE-2025-49113

CVE-2025-49113 Roundcube Exploit A Python exploit for CVE-2025-49113, targeting a vulnerability in Roundcube webmail that allows remote code execution through PHP object deserialization. Overview This exploit leverages a deserialization vulnerability in Roundcube's file upload functionality. It...

httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...

httpd: httpd: Denial of Service via mod_rewrite lookahead

A use-after-free flaw was found in the modrewrite module of Apache HTTP Server when evaluating URL lookahead expressions that reference HTTP request headers, such as %LA-U:HTTP:.... A remote attacker may be able to trigger invalid memory access in a server using an affected rewrite configuration,...

CVE-2026-61707

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by customeruser, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engines when an admin o...

CVE-2026-61645

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

DEBIAN-CVE-2026-115943

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as 100, ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the...

CVE-2026-115943

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt. When a number format has a condition such as 100, ExcelFmt chooses the format section by passing the condition and the cell value to a string eval. Both come from the...

MAL-2026-18401 Malicious code in dowload_ebok_reiki_sviluppa_e_usa_lenergia_reiki_by_matt_harvey_9q55p (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405e9f78919c848257f022e90ba1326206bee394ec4873cb08b846688258ef15 Package 'dowloadebokreikisviluppaeusalenergiareikibymattharvey9q55p' at version 0.0.0-stage contains only 2 files and shows no code-level behavior of...

CVE-2022-46169-Exploit

CVE-2022-46169 PoC - Unauthenticated RCE in Cacti 1.2.22 This repo contains an exploit for CVE-2022-46169, affecting Cacti 1.2.22. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the affected system. If you want a detailed write up of how this exploit is possibl...