1134344 matches found
VMware vCenter Server - Out-of-Bounds Write
vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...
nostromo 1.9.6 - Remote Code Execution
nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via directory traversal in the function httpverify. id: CVE-2019-16278 info: name: nostromo 1.9.6 - Remote Code Execution author: pikpikcu severity: critical description: nostromo nhttpd through 1.9.6 allows an...
Sophos Firewall <=18.5 MR3 - Remote Code Execution
Sophos Firewall version v18.5 MR3 and older contains an authentication bypass vulnerability in the User Portal and Webadmin which could allow a remote attacker to execute code. id: CVE-2022-1040 info: name: Sophos Firewall =18.5 MR4 to mitigate this vulnerability. reference: -...
Commvault - SSRF via /commandcenter/deployWebpackage.do
A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center Innovation Release: 11.38. id: CVE-2025-34028 info: name...
n8n - Remote Code Execution via Expression Injection
n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...
Apache OFBiz - Remote Code Execution
Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45195 info: name: Apache OFBiz -...
Drupal - Remote Code Execution
Drupal 7.x and 8.x contain a remote code execution vulnerability that exists within multiple subsystems. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly...
WordPress File Manager Plugin - Remote Code Execution
The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files. id: CVE-2020-25213 Uploaded file will be accessible at:-...
DrayTek - Remote Code Execution
DrayTek Vigor2960 1.3.1Beta, Vigor3900 1.4.4Beta, and Vigor300B 1.3.3Beta, 1.4.2.1Beta, and 1.4.4Beta devices allow remote code execution as root without authentication via shell metacharacters to the cgi-bin/mainfunction.cgi URI. id: CVE-2020-8515 info: name: DrayTek - Remote Code Execution...
Grafana 3.0.1-7.0.1 - Server-Side Request Forgery
Grafana 3.0.1 through 7.0.1 is susceptible to server-side request forgery via the avatar feature, which can lead to remote code execution. Any unauthenticated user/client can make Grafana send HTTP requests to any URL and return its result. This can be used to gain information about the network...
Windows Server 2003 & IIS 6.0 - Remote Code Execution
Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...
Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE
Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerability in Updates Environment Management, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP. id: CVE-2026-35273 info: name: Oracle PeopleSoft PeopleTool...
Info-Sys-Security-CVE-2025-55182
CVE-2025-55182 Laboratorio di sicurezza "React2Shell" Questa repository contiene un laboratorio accademico locale per l'analisi di CVE-2025-55182 in un ambiente controllato di React Server Components. Il laboratorio simula la vulnerabilità, il suo sfruttamento e la patch applicata. 📁 Struttura...
sk-cve-2026-26030-lab
CVE-2026-26030 — RCE dell'eval del filtro di Semantic Kernel lab Un laboratorio autonomo che riproduce CVE-2026-26030 : esecuzione remota di codice iniettabile tramite prompt attraverso il filtro di ricerca dello store vettoriale in memoria di Microsoft Semantic Kernel Python, Solo per lab etico...
CVE-2026-6271
CVE-2026-6271 — Scanner RCE per il Plugin WordPress Career Section Plugin: Career Section career-section CVE ID: CVE-2026-6271 Punteggio CVSS: 9.8 Critical Vettore CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tipo di vulnerabilità: Unauthenticated Arbitrary File Upload → Remote Code Executi...
cve-2025-66398
CVE-2025-66398 — Signal K Server RCE PoC 📜 Descrizione CVE-2025-66398 è un problema di Signal K Server in cui un attaccante non autenticato può avvelenare lo stato di ripristino del server tramite /skServer/validateBackup, quindi dirottare la configurazione tramite /skServer/restore per iniettare...
Noregressh
Inizialmente volevo costruire uno scanner e un exploiter per regreSHHion. Successivamente ho aggiunto ulteriori CVE. Se qualcuno può aiutarmi a espandere parti del progetto, contattatemi. BENVENUTI IN NOREGRESSH Norregressh è un framework di penetration testing incentrato sulle regressioni di...
CVE-2025-58434-59528-htb-ctf
CVE-2025-58434-59528-htb-ctf Silentium Exploit Chain Questa repository contiene la catena di sfruttamento completa per la macchina Silentium su Hack The Box. L'exploit sfrutta una vulnerabilità a due stadi che coinvolge l'enumerazione degli utenti e l'iniezione JavaScript per ottenere Remote Code...
CVE-2025-8714-POC
CVE-2025-8714-POC PoC di RCE in PostgreSQL — CVE-2025-8714 PoC di Esecuzione Remota di Codice in PostgreSQL — CVE-2025-8714 pgdump Reverse Shell Questo repository presenta una prova di concetto PoC per la vulnerabilità critica CVE-2025-8714 che colpisce le versioni di PostgreSQL precedenti a: 17....