CVE-2026-81743

Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...

CVE-2024-43918

WordPress WBW Product Table Pro = 1.9.4 - 인증되지 않은 임의 SQL 실행을 통한 원격 코드 실행 CVE-2024-43918 WBW Product Table Pro WordPress 플러그인은 최대 1.9.4 버전까지 함수에 대한 적절한 권한 확인이 누락되어 인증되지 않은 임의 SQL 실행에 취약합니다. 이로 인해 인증되지 않은 공격자가 민감한 데이터를 탈취하거나 취약한 사이트에 대한 높은 권한을 획득하는 데 사용할 수 있는 임의 SQL 쿼리를 실행할 수 있습니다. 더 많은 WordPress...

CVE-2019-17621

DLink RCE уязвимость CVE-2019-17621 неавторизованное удаленное выполнение кода FAT может это эмулировать, так что пожалуйста используйте attifyos...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 임의 파일 업로드 -purple 📌 설명 WordPress용 CSV Mass Importer 플러그인≤ 1.2에는 Admin+ 임의 파일 업로드 취약점이 있습니다. 업로드된 파일에 대한 검증이 적절하지 않아, 관리자와 같은 고권한 사용자가 서버에 임의 파일 을 업로드할 수 있습니다. 이는 예를 들어 멀티사이트 환경처럼 제한되어야 하는 경우에도 가능합니다. 이 취약점으로 공격자는 PHP 셸 또는 악성 파일을 업로드하여 서버에서 원격 코드...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 では、攻撃者が管理者権限を持っている場合に 悪意のあるCスクリプトを作成し、サーバー上で実行することによりリモートコード実行が可能です デフォルトでは、ポート8101の管理者コントロールパネルのサーバー設定を介して。 使用方法: python CVE-2023-30459.py -t 127.0.0.1 -p elcomplus -cmd "shutdown /s /t 30" PoC:...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — Red Team Project ITSOLERA Cybersecurity Department | Offensive Security Internship 2026 Overview This project researches, replicates, and documents CVE-2018-7600 Drupalgeddon2 — a Critical CVSS 9.8 unauthenticated Remote Code Execution vulnerability in Drupal CMS,...

CVE-2026-80563

A flaw was found in the Linux kernel's gpio: sloppy-logic-analyzer component. A local attacker with root privileges can exploit a race condition during the unbinding of a platform device. This vulnerability allows writing into memory that has already been freed, which can lead to system instabili...

CVE-2026-74746

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 уязвим для RCE из-за небезопасной десериализации Java. Эксплойт атакует транспортный протокол на порту 9300. Десериализация основана на цепочке Groovy MethodClosure для достижения RCE...

CVE-2026-59894

A flaw was found in sqlparse, a non-validating SQL parser module for Python. When generating Python or PHP code snippets, the sqlparse.format function fails to properly escape backslashes before quotes in SQL strings. This vulnerability allows a local attacker, by providing crafted SQL, to break...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" 무인증 RCE PoC Langflow의 무인증 buildpublictmp 코드 실행 취약점에 대한 PoC입니다. 악성 구성 요소를 공개 플로우에 업로드하고 빌드를 트리거하여 리버스 셸을 획득합니다. 승인된 보안 테스트에만 사용하세요. 자신이 소유했거나 명시적 테스트 허가를 받은 시스템에만 사용하십시오. 요구 사항 Python 3 requests pip install requests 사용법 내장 리스너를 실행하고 익스플로잇을 한 번에 실행합니다:...

CVE-2024-23739

CVE-2024-23739 macOS의 Discord 0.0.291 이하 버전에서 발생하는 문제로, 원격 공격자가 RunAsNode 및 enableNodeClilnspectArguments 설정을 통해 임의의 코드를 실행할 수 있습니다. Electron에서 취약점을 검색하는 과정을 자동화하도록 설계된 도구가 있습니다: https://github.com/r3ggi/electroniz3r 이 도구를 사용하면 앱이 취약한지 확인할 수 있습니다: 검증 후, 코드를 주입하여 셸을 얻을 수 있습니다 셸을 즐기세요 :...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2024-55555

Laravel Crypto Killer 대량 스캐너 CVE-2024-55555 이 스크립트는 Invoice Ninja의 인증되지 않은 원격 코드 실행RCE 취약점인 CVE-2024-55555에 취약한 Laravel 기반 애플리케이션을 대량 스캔합니다. 약하거나 알려진 APPKEY 값을 사용하는 사이트를 탐지하는 프로세스를 자동화하고 취약 여부를 확인합니다. 📌 작동 방식 1. list.txt에서 도메인 목록을 읽습니다. 2. 각 대상에 요청을 보내고 Laravel로 암호화된 쿠키를 캡처합니다XSRF-TOKEN 제외. 3...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...