the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Hard-coded JWT Secret in Cudy WR3000 2.0 Mesh MQTT Broker PoC tooling for the Hunt-Benito article "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

OpenSTA-Exploit

OpenSTA-Exploit Data| Detail ---|--- CVE ID| CVE-2025-69212 Vuln Score| critical 9.4 CWE| 78: Improper Neutralization of Special Elements used in an OS Command Affected Versions| OpenSTAManager ' SHELL.php" maliciousfile = f'invoice.p7m";cmd;echo "...

CLEANSTART-2026-KJ73839 When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as fo...

CVE-2026-39828 affects multiple packages. When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. See reference...

apache__dolphinscheduler_CVE-2022-26884_2-0-5

Dolphin Scheduler Official Website dolphinscheduler.apache.org Total Lines Design Features DolphinScheduler is a distributed and extensible workflow scheduler platform with powerful DAG visual interfaces, dedicated to solving complex job dependencies in the data pipeline and providing various typ...

POC-CVE-2016-10033

POC-CVE-2016-10033 First let’s get the Vulnerable application up and running Step 1: Run the following command to retrieve the vulnerable Docker Image from the Docker repository. Command: docker pull vulnerables/cve-2016-10033 Step 2: Running the Docker image in Docker Desktop, exposing port 8080...

Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

CVE-2022-46169

Cacti v1.2.22: Unauthenticated Command Injection Vulnerability CVE-2022-46169 Based on ariyaadinatha PoC exploit for CVE-2022-46169...

CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

EUVD-2026-104669

A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was...

Ofbiz-RCE

📌 Apache OFBiz RCE Exploit CVE-2024-38856 This Python script allows exploiting a Remote Code Execution RCE vulnerability in Apache OFBiz versions 18.12.15 through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport. 🛠️ Description CVE : CVE-2024-38856 Type : Incorrec...

Malicious code in asurion (PyPI)

Source: kam193 05820dd77e1f73d1a01797af6f10c6fa4ae22038be3fcd6a8cbd8c117cf6436c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

CVE-2021-32157

..| XSS to RCE CRON|.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Remote Command Execution RCE through the Webmin's Scheduled Cron Jobs feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

CVE-2020-36842

CVE-2020-36842 CVE-2020-36842 - WPvivid Plugin Arbitrary File Upload Vulnerability Overview CVE ID: CVE-2020-36842 Disclosure / Update Date: October 16, 2024 Affected Plugin: WPvivid - Migration, Backup, Staging Affected Versions: Up to and including 0.9.35 Vulnerability Type: Arbitrary File Uplo...

system_bt_AOSP10_r33_CVE-2020-0463

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

CVE-2002-0748

Synopsis Gold exploit - the remote web server is prone to a denial of service attack. Description It was possible to kill the web server by sending a request that ends with two LF characters instead of the normal sequence CR LF CR LF CR = carriage return, LF = line feed. An attacker can exploit...

cve-2022-33082-exploit

CVE 2022-33082 Exploit DISCLAMER This code is provided for ETHICAL purposes - understanding the vulnerability and testing one's own systems or AUTHORIZED systems. By using this, you agree to act ethically and I hold no liability if you do not act ethically. This exploit works on Open Policy Agent...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:". Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...

CVE-2023-36143

CVE-2023-36143 Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...

SSRF-Exploit-CVE-2024-27564

SSRF-Exploit-CVE-2024-27564 Project Title This project demonstrates a Server-Side Request Forgery SSRF vulnerability in the pictureproxy.php file. Description A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This...