CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

CVE-2026-13745 Arbitrary Code Execution in Gemini CLI via Symlinked Environment Variables

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

EUVD-2026-75326

A vulnerability in the Gemini CLI and associated GitHub Action allowed an unprivileged attacker to achieve an arbitrary code execution in Gemini CLI via untrusted local .env files overriding GEMINICLIHOME...

CVE-2026-13745

CVE-2026-13745 is an arbitrary code execution vulnerability in Gemini CLI and its associated GitHub Action (google-github-actions/run-gemini-cli). An unprivileged attacker can exploit untrusted local .env files that override the GEMINI_CLI_HOME environment variable to gain code execution within t...

CVE-2026-80352

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

CVE-2026-80351

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

CVE-2025-62369

CVE-2025-62369 PoC This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener root@kitploit: nc -lvnp 2. Run the exploit root@kitploit: python3 exploit.py -u "http://:" -s "" -i -p : Xibo CMS server...

CVE-2024-7591-PoC

CVE-2024-7591-PoC 这些 PoC Python 脚本用于测试 Kemp LoadMaster 是否存在远程代码执行漏洞。 此工具仅供测试用途。 这些脚本基于 Marius Walter 关于此漏洞细节的文章。您可以阅读他们的文章： https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591/ 这是一个 python3 脚本，用于测试 LoadMaster 是否存在 CVE-2024-7591...

CVE-2019-11231-PoC

GetSimpleCMS CVE-2019-11231 RCE Exploit Unauthenticated Remote Code Execution exploit for GetSimpleCMS ≤ 3.3.15 Vulnerability GetSimpleCMS exposes sensitive files publicly /data/other/authorization.xml, /data/users/ allowing attackers to: 1. Leak API keys and usernames 2. Forge authentication...

check-react-rce-cve-2025-55182

React RCE Vulnerability Scanner CVE-2025-55182 A comprehensive security scanning tool to detect CVE-2025-55182 and CVE-2025-66478 vulnerabilities in React and Next.js projects using React Server Components RSC. 🚨 Overview This tool scans your project for vulnerable versions of React, Next.js, and...

CVE-2018-7600

CVE-2018-7600 - Drupal 7 Remote Code Execution A Rust implementation of the CVE-2018-7600 exploit targeting vulnerable Drupal 7 installations = 7.57. This CLI reproduces this following PoC flow: it poisons a cached renderable form via the user/password path, extracts a formbuildid, then triggers...

CVE-2026-14762-PoC-Exploit

CVE-2026-14762 – Code‑Projects Hotel & Tourism Reservation 1.0 SQL Injection Exploit -orange -red Fully featured, multi‑threaded, time‑based blind SQL injection exploit for CVE‑2026‑14762. Targets the /admin/rooms.php endpoint of the Code‑Projects Hotel & Tourism Reservation application version...

EUVD-2026-75291

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

CVE-2026-80351

Apache Camel K is affected by an eval injection vulnerability (CVE-2026-80351) in its dynamically evaluated Maven configuration. Tenant-controlled repository content can influence code execution within the operator pod , potentially allowing tenants to run arbitrary code with operator-level privi...

EUVD-2026-75290

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

CVE-2026-80352

CVE-2026-80352 is a YAML injection vulnerability in Apache Camel K , specifically in the Master trait serviceAccountName field of custom resource configuration. An authorized CR author can inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges...

CVE-2026-80352 Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 This repository contains a proof-of-concept exploit for CVE-2023-51409, an unauthenticated arbitrary file upload vulnerability in the AI Engine: ChatGPT Chatbot WordPress plugin,...

React2Shell-CVE-Lab

⚛️ React2Shell: CVE-2025-55182 Vulnerable Lab ⚠️ WARNING: INTENTIONALLY VULNERABLE APPLICATION This repository contains a Dockerized application specifically configured to be vulnerable to CVE-2025-55182 React2Shell. DO NOT deploy this container in a production environment or on a public server...