289267 matches found
Exploit for CVE-2026-63030
CVE-2026-63030 The WordPress REST API batch routing confusi...
Exploit for CVE-2026-60137
wp2shell - WordPress RCE PoC CVE-2026-63030 + CVE-2026-60137...
wp2shell_stock_chain
wp2shell stock-core chain Authorized-testing proof of concept...
CVE-2026-16133
A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...
CVE-2026-16133
A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...
CVE-2026-16133 LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection
A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...
CVE-2026-16133 LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection
A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...
CVE-2026-16133
CVE-2026-16133 affects LiuMengxuan04 MiniCode 0.1.0. The vulnerable component is the function child_process.spawn in mcp.ts, where manipulation can lead to a command injection. The issue can be triggered remotely, with high attack complexity and no required privileges, and is reported as having a...
EUVD-2026-45393
A flaw has been found in LiuMengxuan04 MiniCode 0.1.0. Affected by this vulnerability is the function childprocess.spawn of the file mcp.ts. Executing a manipulation can lead to command injection. The attack can be launched remotely. The attack requires a high level of complexity. The exploitatio...
wp2shell
wp2shell WordPress REST batch route-confusion blind SQL injec...
FLOCK_CVE_SCANNER
FLOCKCVESCANNER Scan and exploit with permission Ov...
Metasploitable2-Penetration-Testing-Lab
Metasploitable 2 Penetration Testing Lab About the Project...
Exploit for CVE-2026-60137
wp2shell Pre-authentication Remote Code Execution against Wor...
Exploit for CVE-2026-63030
wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A sel...
CVE-2025-71392
SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command. An authenticated System User with OWNER or EDITOR roles can create tables or fields with malicious names containing SurrealQL. When a...
MAL-2026-10917 Malicious code in tinkoff-cloud-apis-internal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 30caca1d5e67322644a0eb6cf8098151d975415baab826d14a0bba75117ae95e Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is...
Malicious code in tinkoff-cloud-apis-internal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 30caca1d5e67322644a0eb6cf8098151d975415baab826d14a0bba75117ae95e Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is...
Malicious code in python-devplatform-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2b75d4d8e3c822aa82b716e6752c0901447845d442973ce9bc35c78b9c81c78a Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is...
MAL-2026-10916 Malicious code in python-devplatform-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2b75d4d8e3c822aa82b716e6752c0901447845d442973ce9bc35c78b9c81c78a Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is...