CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE using ExifTool This project is for learning only, if someone's rights have been violated, please contact me to remove the project, and the lastDO NOT USE IT ILLEGALLY If you have any illegal behavior in the process of using this tool, you will bear all the...

gitlab-onigmo-scanner

gitlab-onigmo-scanner Version triage for the two CVSS 10.0...

CVE-2026-107264

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-107259

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2026-76031

An use after free flaw was found in the Input component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572556403...

CVE-2026-76028

An use after free flaw was found in the FileSystem component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569012015...

CVE-2025-54769

CVE-2025-54769 – LPAR2RRD RCE Description : This repository contains a Proof‑of‑Concept PoC exploit for CVE-2025-54769, a vulnerability found in lpar2rrd. The vulnerability allows remote code execution RCE and directory traversal by abusing the /lpar2rrd-cgi/upgrade.sh endpoint. The exploit...

LOG4J-CVE-2021-44228

LOG4J-CVE-2021-44228 Log4Shell — also known as CVE-2021-44228 — is a critical vulnerability that enables remote code execution in systems using the Apache Foundation’s Log4j, which is an open-source Java library that is extensively used in commercial and open-source software products and utilitie...

CVE-2026-118753

A flaw was found in FreeImage. By convincing a user or system to process a specially crafted GIF file with frame boundaries exceeding the logical screen width, an attacker can trigger a heap-based buffer overflow during image compositing. This flaw can corrupt heap memory, potentially leading to...

CVE-2026-107259 Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0...

EUVD-2026-113575

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0...

CVE-2026-107259 Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0...

CVE-2026-107259

The Drupal Linked Field module (versions 0.0.0 to 1.8.0 ) is vulnerable to a Server-side Template Injection (SSTI) flaw. The module fails to properly separate field content from template code during the rendering of linked field output. If specific Twig extensions are installed, an attacker could...

EUVD-2026-113572

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-107264

The Inline Formatter Field module for Drupal is vulnerable to a Server-side Template Injection (SSTI) . The root cause is the improper neutralization of special elements during template parsing, which allows attackers to render protected data or execute unsafe Twig commands . This issue affects v...

CVE-2026-107264 Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-107264 Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Inline Formatter Field allows Code Injection. This issue affects Inline Formatter Field versions: from 0.0.0 to 4.2.0...

CVE-2026-108097 Drupal core - Critical - Remote code execution - SA-CORE-2026-014

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2...